CVE-2025-71267 — Infinite Loop in Linux
9 documents8 sources
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 90.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 18
Description
In the Linux kernel, the following vulnerability has been resolved:
fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
We found an infinite loop bug in the ntfs3 file system that can lead to a
Denial-of-Service (DoS) condition.
A malformed NTFS image can cause an infinite loop when an ATTR_LIST attribute
indicates a zero data size while the driver allocates memory for it.
When ntfs_load_attr_list() processes a resident ATTR_LIST with data_size set
to zero, it still allocates memo…
Affected Packages3 packages
▶CVEListV5linux/linuxbe71b5cba2e6485e8959da7a9f9a44461a1bb074 — 9267d99fade76d44d4a133599524031fe684156e+7
🔴Vulnerability Details
4GHSA▶
GHSA-j72w-3754-92gg: In the Linux kernel, the following vulnerability has been resolved:
fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
We found an infin↗2026-03-18
OSV▶
CVE-2025-71267: In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST We found an infinit↗2026-03-18