CVE-2025-40067

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the NTFS3 file system driver. The issue arises when attempting index allocation if the $BITMAP attribute is empty, yet index blocks are present, indicating potential on-disk corruption. A malformed NTFS image, triggered by a syzbot, can cause this condition. Specifically, during a rename() operation with a long filename spanning multiple index entries, an empty bitmap allows the name to be added without proper tracking. Subsequent deletion of the original entry then fails. The issue was triggered by a rename() operation. The $BITMAP attribute is used to track the usage of index entries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.