CVE-2025-71266 | Linux Kernel up to 6.19.5 ntfs3 indx_find denial of service

VDB-351518 · CVE-2025-71266 · EUVD-2025-208819 LINUX KERNEL UP TO 6.19.5 NTFS3 INDX_FIND DENIAL OF SERVICE HISTORYDIFFRELATEJSONXMLCTI CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.5 $0-$5k 1.02 Summaryinfo A vulnerability was found in Linux Kernel up to 6.19.5. It has been declared as critical. This affects the function indx_find of the component ntfs3. Such manipulation leads to denial of service. This vulnerability is listed as CVE-2025-71266. There is no available exploit. It is recommended to upgrade the affected component. Detailsinfo A vulnerability was found in Linux Kernel up to 6.19.5 and classified as critical. Affected by this issue is the function indx_find of the component ntfs3. The manipulation with an unknown input leads to a denial of service vulnerability. Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. Impacted is availability. CVE summarizes: In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: check return value of indx_find to avoid infinite loop We found an infinite loop bug in the ntfs3 file system that can lead to a Denial-of-Service (DoS) condition. A malformed dentry in the ntfs3 filesystem can cause the kernel to hang during the lookup operations. By setting the HAS_SUB_NODE flag in an INDEX_ENTRY within a directory's INDEX_ALLOCATION block and manipulating the VCN pointer, an attacker can cause the indx_find() function to repeatedly read the same block, allocating 4 KB of memory each time. The kernel lacks VCN loop detection and depth limits, causing memory exhaustion and an OOM crash. This patch adds a return value check for fnd_push() to prevent a memory exhaustion vulnerability caused by infinite loops. When the index exceeds the size of the fnd->nodes array, fnd_push() returns -EINVAL. The indx_find() function checks this return value and stops processing, preventing further memory allocation. The advisory is available at git.kernel.org. This vulnerability is handled as CVE-2025-71266 since 03/17/2026. Technical details are known, but there is no available exploit. Upgrading to version 5.15.202, 6.1.165, 6.6.128, 6.12.75, 6.18.16, 6.19.6 or 7.0-rc1 eliminates this vulnerability. Applying the patch 14c3188afbedfd5178bbabb8002487ea14b37b56/435d34719db0e130f6f0c621d67ed524cc1a7d10/68e32694be231c1cdb99b7637a657314e88e1a96/398e768d1accd1f5645492ab996005d7aa84a5b0/b0ea441f44ce64fa514a415d4a9e6e2b06e7946c/0ad7a1be44479503dbe5c699759861ef5b8bd70c/1732053c8a6b360e2d5afb1b34fe9779398b072c is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version. The vulnerability is also documented in the databases at EUVD (EUVD-2025-208819) and CERT Bund (WID-SEC-2026-0774). Affected Open Source Linux Kernel Productinfo Type Operating System Vendor Linux Name Kernel Version 5.15.201 6.1.164 6.6.127 6.12.0 6.12.1 6.12.2 6.12.3 6.12.4 6.12.5 6.12.6 6.12.7 6.12.8 6.12.9 6.12.10 6.12.11 6.12.12 6.12.13 6.12.14 6.12.15 6.12.16 6.12.17 6.12.18 6.12.19 6.12.20 6.12.21 6.12.22 6.12.23 6.12.24 6.12.25 6.12.26 6.12.27 6.12.28 6.12.29 6.12.30 6.12.31 6.12.32 6.12.33 6.12.34 6.12.35 6.12.36 6.12.37 6.12.38 6.12.39 6.12.40 6.12.41 6.12.42 6.12.43 6.12.44 6.12.45 6.12.46 6.12.47 6.12.48 6.12.49 6.12.50 6.12.51 6.12.52 6.12.53 6.12.54 6.12.55 6.12.56 6.12.57 6.12.58 6.12.59 6.12.60 6.12.61 6.12.62 6.12.63 6.12.64 6.12.65 6.12.66 6.12.67 6.12.68 6.12.69 6.12.70 6.12.71 6.12.72 6.12.73 6.12.74 6.18.0 6.18.1 6.18.2 6.18.3 6.18.4 6.18.5 6.18.6 6.18.7 6.18.8 6.18.9 6.18.10 6.18.11 6.18.12 6.18.13 6.18.14 6.18.15 6.19.0 6.19.1 6.19.2 6.19.3 6.19.4 6.19.5 License open-source Website Vendor: https://www.kernel.org/ CPE 2.3info 🔒 🔒 🔒 CPE 2.2info 🔒 🔒 🔒 CVSSv4info VulDB Vector: 🔒 VulDB Reliability: 🔍 CVSSv3info VulDB Meta Base Score: 5.7 VulDB Meta Temp Score: 5.5 VulDB Base Score: 5.7 VulDB Temp Score: 5.5 VulDB Vector: 🔒 VulDB Reliability: 🔍 CVSSv2info Vector Complexity Authentication Confidentiality Integrity Availability Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock VulDB Base Score: 🔒 VulDB Temp Score: 🔒 VulDB Reliability: 🔍 Exploitinginfo Class: Denial of service CWE: CWE-404 CAPEC: 🔒 ATT&CK: 🔒 Physical: No Local: No Remote: Partially Availability: 🔒 Status: Not defined Price Prediction: 🔍 Current Price Estimation: 🔒 0-Day Unlock Unlock Unlock Unlock Today Unlock Unlock Unlock Unlock Threat Intelligenceinfo Interest: 🔍 Active Actors: 🔍 Active APT Groups: 🔍 Countermeasuresinfo Recommended: Upgrade Status: 🔍 0-Day Time: 🔒 Upgrade: Kernel 5.15.202/6.1.165/6.6.128/6.12.75/6.18.16/6.19.6/7.0-rc1 Patch: 14c3188afbedfd5178bbabb8002487ea14b37b56/435d34719db0e130f6f0c621d67ed524cc1a7d10/68e32694be231c1cdb99b7637a657314e88e1a96/398e768d1accd1f5645492ab996005d7aa84a5b0/b0ea441f44ce64fa514a415d4a9e6e2b06e7946c/0ad7a1be44479503dbe5c699759861ef5b8bd70c/1732053c8a6b360e2d5afb1b34fe9779398b072c Timelineinfo 03/17/2026 CVE reserved 03/18/2026 +1 days Advisory disclosed 03/18/2026 +0 days VulDB entry created 03/18/2026 +0 days VulDB entry last update Sourcesinfo Vendor: kernel.org Advisory: git.kernel.org Status: Confirmed CVE: CVE-2025-71266 (🔒) GCVE (CVE): GCVE-0-2025-71266 GCVE (VulDB): GCVE-100-351518 EUVD: 🔒 CERT Bund: WID-SEC-2026-0774 - Linux Kernel: Mehrere Schwachstellen Entryinfo Created: 03/18/2026 11:57 Updated: 03/18/2026 14:48 Changes: 03/18/2026 11:57 (59), 03/18/2026 12:52 (1), 03/18/2026 14:48 (7) Complete: 🔍 Cache ID: 99:2B0:101 Discussion No comments yet. Languages: en. Please log in to comment. ◂ PreviousOverviewNext ▸