In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: prevent uninitialized lcn caused by zero len
syzbot reported a uninit-value in ntfs_iomap_begin [1].
Since runs was not touched yet, run_lookup_entry() immediately fails and returns false, which makes the value of "*len" 0. Simultaneously, the new value and err value are also 0, causing the logic in attr_data_get_block_locked() to jump directly to ok, ultimately resulting in *lcn being triggered before it is set [1].
In ntfs_iomap_begin(), the check for a 0 value in clen is moved forward to before updating lcn to avoid this [1].
[1] BUG: KMSAN: uninit-value in ntfs_iomap_begin+0x8c0/0x1460 fs/ntfs3/inode.c:825 ntfs_iomap_begin+0x8c0/0x1460 fs/ntfs3/inode.c:825 iomap_iter+0x9b7/0x1540 fs/iomap/iter.c:110
Local variable lcn created at: ntfs_iomap_begin+0x15d/0x1460 fs/ntfs3/inode.c:786
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-oem-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-gke-7.0Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-azureUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-gke-64kUpgrade linux-image-realtime-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-gke-64k-7.0Upgrade linux-image-ibm-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oem-24.04cUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-raspiUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-nvidia-bosUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-azure-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-generic-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-gcp-7.0Upgrade linux-image-awsUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-oem-24.04Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-oem-24.04dUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-genericUpgrade linux-image-virtual-7.0Upgrade linux-image-oem-24.04a | Jul 20, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub