CVE-2025-38707

fs/ntfs3: Add sanity check for file name

State: Published
Severity: 7.1 High
Published: Sep 4, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Add sanity check for file name

The length of the file name should be smaller than the directory entry size.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before bde58c1539f3ffddffc94d64007de16964e6b8ebAffected 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before f99eb9a641f4ef927d8724f4966dcfd1f0e9f835Affected 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 3572737a768dadea904ebc4eb34b6ed575bb72d9Affected 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 2ac47f738ddfc1957a33be163bc97ee8f78e85a6Affected 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before b51642fc52d1c7243a9361555d5c4b24d7569d7eAffected 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 27ee9a42b245efe6529e28b03453291a775cb3e4Affected 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before e841ecb139339602bc1853f5f09daa5d1ea920a2Affected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.190 through 5.15.Not affected 6.1.149 through 6.1.Not affected 6.6.103 through 6.6.Not affected 6.12.43 through 6.12.Not affected 6.15.11 through 6.15.Not affected 6.16.2 through 6.16.Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before bde58c1539f3ffddffc94d64007de16964e6b8ebAffected
4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before f99eb9a641f4ef927d8724f4966dcfd1f0e9f835Affected
4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 3572737a768dadea904ebc4eb34b6ed575bb72d9Affected
4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 2ac47f738ddfc1957a33be163bc97ee8f78e85a6Affected
4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before b51642fc52d1c7243a9361555d5c4b24d7569d7eAffected
4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 27ee9a42b245efe6529e28b03453291a775cb3e4Affected
4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before e841ecb139339602bc1853f5f09daa5d1ea920a2Affected

LinuxLinux

5.15Affected
before 5.15Not affected
5.15.190 through 5.15.*Not affected
6.1.149 through 6.1.*Not affected
6.6.103 through 6.6.*Not affected
6.12.43 through 6.12.*Not affected
6.15.11 through 6.15.*Not affected
6.16.2 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.