Back to Database
Status published
Unknown
CVE-2025-40313
ntfs3: pretend $Extend records as regular files
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ntfs3: pretend $Extend records as regular files Since commit af153bb63a33 ("vfs: catch invalid modes in may_open()") requires any inode be one of S_IFDIR/S_IFLNK/S_IFREG/S_IFCHR/S_IFBLK/ S_IFIFO/S_IFSOCK type, use S_IFREG for $Extend records.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-40313
Credits & Attribution
No credits recorded in the NVD database.
References
- https://git.kernel.org/stable/c/63eb6730ce0604d3eacf036c2f68ea70b068317c
- https://git.kernel.org/stable/c/78d46f5276ed3589aaaa435580068c5b62efc921
- https://git.kernel.org/stable/c/17249b2a65274f73ed68bcd1604e08a60fd8a278
- https://git.kernel.org/stable/c/37f65e68ba9852dc51c78dbb54a9881c3f0fe4f7
- https://git.kernel.org/stable/c/57534db1bbc4ca772393bb7d92e69d5e7b9051cf
- https://git.kernel.org/stable/c/4e8011ffec79717e5fdac43a7e79faf811a384b7
More from Linux
View All →CVE-2025-71315
drm/vkms: Convert to DRM's vblank timer
Unknown
0
CVE-2025-71314
drm/panthor: Recover from panthor_gpu_flush_caches() failures
Unknown
0
CVE-2025-71313
PCI: endpoint: Add missing NULL check for alloc_workqueue()
Unknown
0
CVE-2025-71312
fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()
Unknown
0
CVE-2025-71311
fs/ntfs3: Initialize new folios before use
Unknown
0
Affected Vendor
Linux
View all reports →Affected Software
Linux
Vulnerable Versions:
4534a70b7056fd4b9a1c6db5a4ce3c98546b291e, 5.15, 0, 5.15.197, 6.1.159, 6.6.117, 6.12.58, 6.17.8, 6.18
Timeline
Official Publish:
December 8th, 2025
Last Modified:
May 11th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.