Vulnerability in Linux

CVE-2025-40313

In the Linux kernel, the following vulnerability has been resolved: ntfs3: pretend $Extend records as regular files Since commit af153bb63a33 ("vfs: catch invalid modes in may_open()") requires any inode be one of S_IFDIR/S_IFLNK/S_IFREG/S_IFCHR/S_IFBLK/ S_IFIFO/S_IFSOCK type, use S_IFREG for $Extend records.

EPSS: 0.002 (6.8th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e, 5.15, 0

References