CVE-2025-40313

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s NTFS3 implementation where $Extend records are incorrectly treated as regular files. This issue arose because of a requirement, introduced by commit af153bb63a33, that inodes must be one of several specific types (directory, symbolic link, regular file, character device, block device, FIFO, or socket). To address this, the code now uses the S IFREG type for $Extend records.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.