{
  "cveId": "CVE-2025-71067",
  "url": "https://patchblox.com/security/cve/CVE-2025-71067",
  "summary": "CVE-2025-71067 is fixed in 45 products on 1 platform, first by DEBIAN-CVE-2025-71067, released January 13, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "ntfs: set dummy blocksize to read boot_block when mounting",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ntfs: set dummy blocksize to read boot_block when mounting  When mounting, sb-\u003Es_blocksize is used to read the boot_block without being defined or validated. Set a dummy blocksize before attempting to read the boot_block.  The issue can be triggered with the following syz reproducer:    mkdirat(0xffffffffffffff9c, \u0026(0x7f0000000080)=\u0027./file1\\x00\u0027, 0x0)   r4 = openat$nullb(0xffffffffffffff9c, \u0026(0x7f0000000040), 0x121403, 0x0)   ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, \u0026(0x7f0000000980)=0x4000)   mount(\u0026(0x7f0000000140)=@nullb, \u0026(0x7f0000000040)=\u0027./cgroup\\x00\u0027,         \u0026(0x7f0000000000)=\u0027ntfs3\\x00\u0027, 0x2208004, 0x0)   syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)  Here, the ioctl sets the bdev block size to 16384. During mount, get_tree_bdev_flags() calls sb_set_blocksize(sb, block_size(bdev)), but since block_size(bdev) \u003E PAGE_SIZE, sb_set_blocksize() leaves sb-\u003Es_blocksize at zero.  Later, ntfs_init_from_boot() attempts to read the boot_block while sb-\u003Es_blocksize is still zero, which triggers the bug.  [almaz.alexandrovich@paragon-software.com: changed comment style, added return value handling]",
  "published": "2026-01-13T16:16:06Z",
  "severity": "Important",
  "cvss": 7.1,
  "epss": 0.00202,
  "epssPercentile": 0.10169,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71067",
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.1.168-202.320",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.12.64-87.122",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-libbpf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.170-1",
      "fix": "DEBIAN-CVE-2025-71067",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-71067",
      "released": "2026-01-13T16:16:06Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.69-1",
      "fix": "DEBIAN-CVE-2025-71067",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-71067",
      "released": "2026-01-13T16:16:06Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.18.3-1",
      "fix": "DEBIAN-CVE-2025-71067",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-71067",
      "released": "2026-01-13T16:16:06Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "fix": "ALAS2023-2026-1681",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
      "released": "2026-05-11T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.64-87.122.amzn2023",
      "fix": "ALAS2023-2026-1423",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1423",
      "released": "2026-02-05T22:03:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}