CVE-2025-71266 — Infinite Loop in Linux
9 documents8 sources
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 90.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 18
Description
In the Linux kernel, the following vulnerability has been resolved:
fs: ntfs3: check return value of indx_find to avoid infinite loop
We found an infinite loop bug in the ntfs3 file system that can lead to a
Denial-of-Service (DoS) condition.
A malformed dentry in the ntfs3 filesystem can cause the kernel to hang
during the lookup operations. By setting the HAS_SUB_NODE flag in an
INDEX_ENTRY within a directory's INDEX_ALLOCATION block and manipulating the
VCN pointer, an attacker can cause t…
Affected Packages3 packages
▶CVEListV5linux/linux82cae269cfa953032fbb8980a7d554d60fb00b17 — 14c3188afbedfd5178bbabb8002487ea14b37b56+7
🔴Vulnerability Details
4OSV▶
CVE-2025-71266: In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: check return value of indx_find to avoid infinite loop We found an infi↗2026-03-18
GHSA▶
GHSA-f43g-cfgj-442p: In the Linux kernel, the following vulnerability has been resolved:
fs: ntfs3: check return value of indx_find to avoid infinite loop
We found an in↗2026-03-18