In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize new folios before use KMSAN reports an uninitialized value in longest_match_std(), invoked from ntfs_compress_write(). When new folios are allocated without being marked uptodate and ni_read_frame() is skipped because the caller expects the frame to be completely overwritten, some reserved folios may remain only partially filled, leaving the rest memory uninitialized.
| Version | Score | Severity | Vector String |
|---|---|---|---|
| 3.1 | 8.2 | High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N |
| Product | Vendor | Version |
|---|---|---|
| Linux | Linux | < 10.0.17763.4645 |
| Linux | Linux | < 10.0.17763.4645 |
| Linux | Linux | n/a |
| Linux | Linux | n/a |