PT-2025-17664 · Linux+4 · Linux Kernel+4

Published

2025-04-23

·

Updated

2026-05-26

·

CVE-2025-40313

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel’s NTFS3 implementation where $Extend records are incorrectly treated as regular files. This issue arose because of a requirement, introduced by commit af153bb63a33, that inodes must be one of several specific types (directory, symbolic link, regular file, character device, block device, FIFO, or socket). To address this, the code now uses the S IFREG type for $Extend records.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2025-40313
ECHO-2283-261E-DD99
MGASA-2026-0017
MGASA-2026-0018
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8096-1
USN-8096-2
USN-8096-3
USN-8096-4
USN-8096-5
USN-8100-1
USN-8116-1
USN-8125-1
USN-8126-1
USN-8141-1
USN-8163-1
USN-8163-2
USN-8165-1
USN-8243-1
USN-8261-1

Affected Products

Debian
Linuxmint
Linux Kernel
Ntfs3
Ubuntu