CVE-2025-71266

MEDIUM EPSS 2.0%
Published Mar 18, 20263mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Mar 18, 2026 3mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: check return value of indx_find to avoid infinite loop We found an infinite loop bug in the ntfs3 file system that can lead to a Denial-of-Service (DoS) condition. A malformed dentry in the ntfs3 filesystem can cause the kernel to hang during the lookup operations. By setting the HAS_SUB_NODE flag in an INDEX_ENTRY within a directory's INDEX_ALLOCATION block and manipulating the VCN pointer, an attacker can cause the indx_find() function to repeatedly read the same block, allocating 4 KB of memory each time. The kernel lacks VCN loop detection and depth limits, causing memory exhaustion and an OOM crash. This patch adds a return value check for fnd_push() to prevent a memory exhaustion vulnerability caused by infinite loops. When the index exceeds the size of the fnd->nodes array, fnd_push() returns -EINVAL. The indx_find() function checks this return value and stops processing, preventing further memory allocation.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
2.0% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-835

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel*≥5.15.1  –  <5.15.202
linuxlinux_kernel*≥5.16  –  <6.1.165
linuxlinux_kernel*≥6.2  –  <6.6.128
linuxlinux_kernel*≥6.7  –  <6.12.75
linuxlinux_kernel*≥6.13  –  <6.18.16
linuxlinux_kernel*≥6.19  –  <6.19.6
linuxlinux_kernel5.15any

References 7

  • git.kernel.org https://git.kernel.org/stable/c/0ad7a1be44479503dbe5c699759861ef5b8bd70c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/14c3188afbedfd5178bbabb8002487ea14b37b56
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1732053c8a6b360e2d5afb1b34fe9779398b072c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/398e768d1accd1f5645492ab996005d7aa84a5b0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/435d34719db0e130f6f0c621d67ed524cc1a7d10
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/68e32694be231c1cdb99b7637a657314e88e1a96
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b0ea441f44ce64fa514a415d4a9e6e2b06e7946c
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/0ad7a1be44479503dbe5c699759861ef5b8bd70c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/14c3188afbedfd5178bbabb8002487ea14b37b56
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1732053c8a6b360e2d5afb1b34fe9779398b072c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/398e768d1accd1f5645492ab996005d7aa84a5b0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/435d34719db0e130f6f0c621d67ed524cc1a7d10
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/68e32694be231c1cdb99b7637a657314e88e1a96
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b0ea441f44ce64fa514a415d4a9e6e2b06e7946c
    Patch