01 Record

CVE-2025-68369

ntfs3: init run lock for extend inode

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

ntfs3: init run lock for extend inode

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.45% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 39.2% of scored records. A rank, not a probability.
NVD base score: 7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Deferred. NVD last modified this record on 2026-10-13.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-12-24 10:32Z10 MO AGO

Last updated

2026-08-05 12:11Z2 MO AGO

Reserved

2025-12-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-908Use of Uninitialized ResourceBase

Data version

5.2

Document digest

cc404f777f594c59f931197c6016b9083a735baa756332de1f80b314659e1a00

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux63eb6730ce0604d3eacf036c2f68ea70b068317c to < 79c8a77b1782e2ace96d063be3c41ba540d1e20a, 78d46f5276ed3589aaaa435580068c5b62efc921 to < 433d1f7c628c3cbdd7efce064d6c7acd072cf6c4, 17249b2a65274f73ed68bcd1604e08a60fd8a278 to < 907bf69c6b6ce5d038eec7a599d67b45b62624bc, 37f65e68ba9852dc51c78dbb54a9881c3f0fe4f7 to < 6e17555728bc469d484c59db4a0abc65c19bc315, 57534db1bbc4ca772393bb7d92e69d5e7b9051cf to < 19164d8228317f3f1fe2662a9ba587cfe3b2d29e, 4e8011ffec79717e5fdac43a7e79faf811a384b7 to < ab5e8ebeee1caa4fcf8be7d8d62c0a7165469076, 4e8011ffec79717e5fdac43a7e79faf811a384b7 to < be99c62ac7e7af514e4b13f83c891a3cccefaa48, 5.15.197 to < 5.15.198, 6.1.159 to < 6.1.160, 6.6.117 to < 6.6.120, 6.12.58 to < 6.12.63, 6.17.8 to < 6.17.13, 6.18—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/79c8a77b1782e2ace96d063be3c41ba540d1e20a
git.kernel.orghttps://git.kernel.org/stable/c/433d1f7c628c3cbdd7efce064d6c7acd072cf6c4
git.kernel.orghttps://git.kernel.org/stable/c/907bf69c6b6ce5d038eec7a599d67b45b62624bc
git.kernel.orghttps://git.kernel.org/stable/c/6e17555728bc469d484c59db4a0abc65c19bc315
git.kernel.orghttps://git.kernel.org/stable/c/19164d8228317f3f1fe2662a9ba587cfe3b2d29e
git.kernel.orghttps://git.kernel.org/stable/c/ab5e8ebeee1caa4fcf8be7d8d62c0a7165469076
git.kernel.orghttps://git.kernel.org/stable/c/be99c62ac7e7af514e4b13f83c891a3cccefaa48

07 Fixed in

Debian 12

linux
Fixed in 6.1.162-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.17.13-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.