CVE-2025-71067

Published Jan 13, 2026

Overview

CVE-2025-71067 is a known-severity vulnerability. It was published on January 13, 2026.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

ntfs: set dummy blocksize to read boot_block when mounting

When mounting, sb->s_blocksize is used to read the boot_block without

being defined or validated. Set a dummy blocksize before attempting to

read the boot_block.

The issue can be triggered with the following syz reproducer:

mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)

r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0)

ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x4000)

mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00',

&(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0)

syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)

Here, the ioctl sets the bdev block size to 16384. During mount,

get_tree_bdev_flags() calls sb_set_blocksize(sb, block_size(bdev)),

but since block_size(bdev) > PAGE_SIZE, sb_set_blocksize() leaves

sb->s_blocksize at zero.

Later, ntfs_init_from_boot() attempts t

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Ref git.kernel.org/stable/c/0c9327c8abf9c8f046e45008bb43d94d8ee5c6c5 Ref git.kernel.org/stable/c/44a38eb4f7876513db5a1bccde74de9bc4389d43 Ref git.kernel.org/stable/c/4fff9a625da958a33191c8553a03283786f9f417 Ref git.kernel.org/stable/c/b3c151fe8f543f1a0b8b5df16ce5d97afa5ec85a Ref git.kernel.org/stable/c/d1693a7d5a38acf6424235a6070bcf5b186a360d

Frequently Asked Questions

What is CVE-2025-71067?

CVE-2025-71067 is a known-severity vulnerability. It was published on January 13, 2026.

How severe is CVE-2025-71067?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2025-71067?

How can CyberStrike help with CVE-2025-71067?

CyberStrike's AI-powered security agents can automatically detect CVE-2025-71067 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.