PT-2025-17664 · Linux+4 · Linux Kernel+4

Publicado

2025-04-23

·

Atualizado

2026-05-26

·

CVE-2025-40313

Nenhuma

Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel’s NTFS3 implementation where $Extend records are incorrectly treated as regular files. This issue arose because of a requirement, introduced by commit af153bb63a33, that inodes must be one of several specific types (directory, symbolic link, regular file, character device, block device, FIFO, or socket). To address this, the code now uses the S IFREG type for $Extend records.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2025-40313
ECHO-2283-261E-DD99
MGASA-2026-0017
MGASA-2026-0018
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8096-1
USN-8096-2
USN-8096-3
USN-8096-4
USN-8096-5
USN-8100-1
USN-8116-1
USN-8125-1
USN-8126-1
USN-8141-1
USN-8163-1
USN-8163-2
USN-8165-1
USN-8243-1
USN-8261-1

Produtos afetados

Debian
Linuxmint
Linux Kernel
Ntfs3
Ubuntu