Linux Kernel Uninitialized Memory Vulnerability in NTFS3 File System

A vulnerability in the Linux kernel's NTFS3 file system has been addressed, concerning the use of uninitialized memory. This issue was identified by the Kernel Memory Sanitizer (KMSAN), which reported multiple instances of uninitialized values. The vulnerability arises because memory allocated by the '__getname()' function, a wrapper for 'kmem_cache_alloc()', is used before it is properly cleared. The proposed solution involves changing 'kmem_cache_alloc()' to 'kmem_cache_zalloc()' to ensure that memory is correctly allocated and initialized before use.

Impact

The vulnerability could lead to the use of uninitialized memory, potentially causing undefined behavior in the affected application.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.