CVE-2025-40068

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel's NTFS3 subsystem related to integer overflow in the run unpack() function. The run unpack() function decodes compressed runlist data from MFT attributes, converting it into a runs tree structure. Insufficient validation of runlist array values before processing can lead to arbitrary data access or destruction on the disk, potentially bypassing access checks. The issue involves substituting the runlist in the $DATA attribute of the MFT record for an arbitrary file. An overflow check has been added to address the addition operation. This was discovered by the Linux Verification Center (linuxtesting.org) with SVACE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.