The Linux kernel NTFS3 filesystem driver had a memory leak vulnerability (CVE-2025-71312) in the ntfs_fill_super() function. Specifically, the fc->fs_private pointer was set to NULL without freeing the memory it pointed to, causing the ntfs_mount_options structure to remain allocated and unreferenced. This leads to a kmemleak report indicating a memory leak. The issue was addressed by removing the unnecessary nullification of fc->fs_private and using the put_mount_options() helper function to properly free the mount options memory during cleanup.

This vulnerability causes a memory leak in the kernel when mounting NTFS filesystems, which can lead to increased memory usage and potential resource exhaustion over time. There is no impact on confidentiality or integrity, but availability could be affected due to the memory leak (denial of service via resource exhaustion).

A fix for this vulnerability is available in the Linux kernel source code. Users should update to a kernel version that includes the patch correcting the ntfs_fill_super() memory leak. Since no vendor advisory or patch links are provided here, check the official Linux kernel repositories or vendor advisories for the specific patch and update instructions. Patch status is not yet confirmed in this data — verify with the vendor advisory for current remediation guidance.