Riskcovery

CVE-2025-40313

ntfs3: pretend $Extend records as regular files

State
Published
Severity
Not scored
Published
Dec 8, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: pretend $Extend records as regular files

Since commit af153bb63a33 ("vfs: catch invalid modes in may_open()") requires any inode be one of S_IFDIR/S_IFLNK/S_IFREG/S_IFCHR/S_IFBLK/ S_IFIFO/S_IFSOCK type, use S_IFREG for $Extend records.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 63eb6730ce0604d3eacf036c2f68ea70b068317cAffected
  • 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 78d46f5276ed3589aaaa435580068c5b62efc921Affected
  • 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 17249b2a65274f73ed68bcd1604e08a60fd8a278Affected
  • 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 37f65e68ba9852dc51c78dbb54a9881c3f0fe4f7Affected
  • 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 57534db1bbc4ca772393bb7d92e69d5e7b9051cfAffected
  • 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e to before 4e8011ffec79717e5fdac43a7e79faf811a384b7Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.197 through 5.15.*Not affected
  • 6.1.159 through 6.1.*Not affected
  • 6.6.117 through 6.6.*Not affected
  • 6.12.58 through 6.12.*Not affected
  • 6.17.8 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.