CVE-2025-71067 describes a vulnerability in the Linux kernel's NTFS driver where an uninitialized block size can lead to an attempt to read the boot block with a zero block size during mounting. This issue specifically affects systems utilizing the NTFS3 driver. The vulnerability has a FAUCET Risk Score of 39/100, indicating a moderate severity, and can be triggered by a crafted mount operation where the device's block size exceeds PAGE_SIZE, preventing proper initialization of sb->s_blocksize. There is currently no public exploit code available, nor is it listed in the CISA KEV catalog, suggesting it is not actively exploited in the wild, though it has garnered some community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Linux | Linux | 5.15CNA affecteddefault affected | |
| Linux | Linux | >= 28861e3bbd9e7ac4cd9c811aad71b4d116e27930, < 0c9327c8abf9c8f046e45008bb43d94d8ee5c6c5, >= 28861e3bbd9e7ac4cd9c811aad71b4d116e27930, < 44a38eb4f7876513db5a1bccde74de9bc4389d43, >= 28861e3bbd9e7ac4cd9c811aad71b4d116e27930, < 4fff9a625da958a33191c8553a03283786f9f417, >= 28861e3bbd9e7ac4cd9c811aad71b4d116e27930, < b3c151fe8f543f1a0b8b5df16ce5d97afa5ec85a, >= 28861e3bbd9e7ac4cd9c811aad71b4d116e27930, < d1693a7d5a38acf6424235a6070bcf5b186a360dCNA affecteddefault unaffected |
CVSS data has not been published for this CVE.
Linux kernel (NVIDIA Tegra) vulnerabilities
May 11, 2026Linux kernel (Xilinx) vulnerabilities
May 7, 2026Linux kernel (Azure FIPS) vulnerabilities
May 7, 2026Linux kernel (Azure) vulnerabilities
May 7, 2026Linux kernel (Raspberry Pi) vulnerabilities
May 7, 2026Linux kernel vulnerabilities
May 7, 2026Linux kernel (GCP) vulnerabilities
May 7, 2026Linux kernel (Low Latency NVIDIA) vulnerabilities
Apr 28, 2026Linux kernel (Raspberry Pi Real-time) vulnerabilities
Apr 23, 2026Linux kernel (Oracle) vulnerabilities
Apr 23, 2026Linux kernel vulnerabilities
Apr 23, 2026Linux kernel vulnerabilities
Apr 23, 2026Linux kernel (NVIDIA) vulnerabilities
Apr 17, 2026Linux kernel (FIPS) vulnerabilities
Apr 17, 2026Linux kernel (Real-time) vulnerabilities
Apr 17, 2026Linux kernel (GCP) vulnerabilities
Apr 17, 2026Linux kernel vulnerabilities
Apr 16, 2026Linux kernel vulnerabilities
Apr 16, 2026ntfs: set dummy blocksize to read boot_block when mounting
Jan 13, 2026kernel: ntfs: set dummy blocksize to read boot_block when mounting
Jan 13, 2026