CVE-2025-68365Use of Uninitialized Resource in Linux

Severity
5.5MEDIUMNVD
EPSS
0.0%
top 97.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 24
Latest updateApr 17

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitialized values detected: - KMSAN: uninit-value in ntfs_read_hdr (3) - KMSAN: uninit-value in bcmp (3) Memory is allocated by __getname(), which is a wrapper for kmem_cache_alloc(). This memory is used before being properly cleared. Change kmem_cache_alloc() to kmem_cache_zalloc() to properly allocate and clear memory before use.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages18 packages

NVDlinux/linux_kernel5.155.15.199+4
Debianlinux/linux_kernel< 6.1.162-1+2
CVEListV5linux/linux82cae269cfa953032fbb8980a7d554d60fb00b17bdf38063fd15f2fc7361dc0b5d3c259741eab835+6

Patches

🔴Vulnerability Details

2
GHSA
GHSA-g737-8242-62f7: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uniniti2025-12-24
OSV
CVE-2025-68365: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitial2025-12-24

📋Vendor Advisories

12
Ubuntu
Linux kernel (HWE) vulnerabilities2026-04-17
Ubuntu
Linux kernel (GCP) vulnerabilities2026-04-17
Ubuntu
Linux kernel (NVIDIA) vulnerabilities2026-04-17
Ubuntu
Linux kernel (Real-time) vulnerabilities2026-04-17
Ubuntu
Linux kernel (FIPS) vulnerabilities2026-04-17

🕵️Threat Intelligence

1
Wiz
CVE-2025-68365 Impact, Exploitability, and Mitigation Steps | Wiz
CVE-2025-68365 — Use of Uninitialized Resource in Linux | cvebase