PT-2025-44136 · Linux+2 · Linux Kernel+2
Published
2025-08-25
·
Updated
2026-05-07
·
CVE-2025-40068
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the Linux kernel's NTFS3 subsystem related to integer overflow in the
run unpack() function. The run unpack() function decodes compressed runlist data from MFT attributes, converting it into a runs tree structure. Insufficient validation of runlist array values before processing can lead to arbitrary data access or destruction on the disk, potentially bypassing access checks. The issue involves substituting the runlist in the $DATA attribute of the MFT record for an arbitrary file. An overflow check has been added to address the addition operation. This was discovered by the Linux Verification Center (linuxtesting.org) with SVACE.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu