---
id: CVE-2025-71311
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  fs/ntfs3: Initialize new folios before use

  KMSAN reports an uninitialized value in longest_match_std(), invoked
  from ntfs_compress_write()
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  fs/ntfs3: Initialize new folios before use

  KMSAN reports an uninitialized value in longest_match_std(), invoked
  from ntfs_compress_write(). When new folios are allocat…
severity: high
cvss: 8.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N'
cwe:
  - CWE-908
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.11, < 6.12.75'
  - 'linux_kernel >= 6.13, < 6.18.14'
  - 'linux_kernel >= 6.19, < 6.19.4'
patched:
  - linux_kernel 6.19.4
published: '2026-05-27'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T13:10:00.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71311'
references:
  - url: 'https://git.kernel.org/stable/c/41d79f8e2a36622d148719bf7c18b46ac1264284'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5a30cc03bde169ad558695b26da6ea7e55f6194a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/dd6c81527d097b3b0bf5a15c2fdc9657d045144c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f223ebffa185cc8da934333c5a31ff2d4f992dc9'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00323
epssPercentile: 0.23594
ingestedAt: '2026-10-14T13:30:58.506Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Initialize new folios before use

KMSAN reports an uninitialized value in longest_match_std(), invoked
from ntfs_compress_write(). When new folios are allocated without being
marked uptodate and ni_read_frame() is skipped because the caller expects
the frame to be completely overwritten, some reserved folios may remain
only partially filled, leaving the rest memory uninitialized.

## Affected

- `linux_kernel >= 6.11, < 6.12.75`
- `linux_kernel >= 6.13, < 6.18.14`
- `linux_kernel >= 6.19, < 6.19.4`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.19.4`