CVE-2025-71311

kernel: fs/ntfs3: Initialize new folios before use

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's fs/ntfs3 component. When new memory pages (folios) are allocated for the NTFS3 file system without being properly initialized, and a read operation is skipped, parts of these folios may contain uninitialized memory. This can lead to a memory corruption vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-824 · Access of Uninitialized Pointer