In the Linux kernel, the following vulnerability has been resolved:
ntfs3: fix uninit memory after failed miread in miformat_new
Fix a KMSAN un-init bug found by syzkaller.
ntfsgetbh() expects a buffer from sb_getblk(), that buffer may not be uptodate. We do not bring the buffer uptodate before setting it as uptodate. If the buffer were to not be uptodate, it could mean adding a buffer with un-init data to the mi record. Attempting to load that record will trigger KMSAN.
Avoid this by setting the buffer as uptodate, if it’s not already, by overwriting it.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68728.json",
"cna_assigner": "Linux"
}