CVE-2025-40313ntfs3: pretend $Extend records as regular files
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ntfs3: pretend $Extend records as regular files Since commit af153bb63a33 ("vfs: catch invalid modes in may_open()") requires any inode be one of S_IFDIR/S_IFLNK/S_IFREG/S_IFCHR/S_IFBLK/ S_IFIFO/S_IFSOCK type, use S_IFREG for $Extend records.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e builds before 63eb6730ce0604d3eacf036c2f68ea70b068317c; 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e builds before 78d46f5276ed3589aaaa435580068c5b62efc921; from 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e before 17249b2a65274f73ed68bcd1604e08a60fd8a278; 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e builds before 37f65e68ba9852dc51c78dbb54a9881c3f0fe4f7; from 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e before 57534db1bbc4ca772393bb7d92e69d5e7b9051cf; 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e builds before 4e8011ffec79717e5fdac43a7e79faf811a384b7 | CNA record |
References
- https://git.kernel.org/stable/c/63eb6730ce0604d3eacf036c2f68ea70b068317c
- https://git.kernel.org/stable/c/78d46f5276ed3589aaaa435580068c5b62efc921
- https://git.kernel.org/stable/c/17249b2a65274f73ed68bcd1604e08a60fd8a278
- https://git.kernel.org/stable/c/37f65e68ba9852dc51c78dbb54a9881c3f0fe4f7
- https://git.kernel.org/stable/c/57534db1bbc4ca772393bb7d92e69d5e7b9051cf
- https://git.kernel.org/stable/c/4e8011ffec79717e5fdac43a7e79faf811a384b7
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.