CVE-2025-71067

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to handling block sizes during the mounting of NTFS file systems. Specifically, when mounting, the superblock's block size (sb->s blocksize) is used to read the boot block without proper validation. If the block size exceeds the page size, sb->s blocksize remains zero, leading to an error when ntfs init from boot() attempts to read the boot block. The issue is triggered by setting a large block device size via an ioctl call before mounting the NTFS file system. The reproducer involves setting the block size to 16384 and then mounting the file system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.