Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U N N H 5.5 .0039 32.5 —
AFFECTED Product Versions Fixed Linux 82cae269cfa953032fbb8980a7d554d60fb00b17 – — Linux 5.15 – 5.15.199
TIMELINE Dec 16 Reserved by Linux Dec 24 Published (CNA: Linux) Jul 30 RESCORED — CVE-2025-68365 (Linux). CVSS 8.2 → 5.5 (NVD).
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitialized values detected: - KMSAN: uninit-value in ntfs_read_hdr (3) - KMSAN: uninit-value in bcmp (3) Memory is allocated by __getname(), which is a wrapper for kmem_cache_alloc(). This memory is used before being properly cleared. Change kmem_cache_alloc() to kmem_cache_zalloc() to properly allocate and clear memory before use.
| Date | Event | Detail |
|---|---|---|
| December 16, 2025 | Reserved | Reserved by Linux |
| December 24, 2025 | Published | Published (CNA: Linux) |
| July 30, 2026 | RESCORED | RESCORED — CVE-2025-68365 (Linux). CVSS 8.2 → 5.5 (NVD). |
Authoritative record: CVE-2025-68365 at cve.org
Vendors: linux
Weaknesses: CWE-908
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2025-68365 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.