CVE-2025-40313
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: ntfs3: pretend $Extend records as regular files Since commit af153bb63a33 ("vfs: catch invalid modes in may_open()") requires any inode be one of S_IFDIR/S_IFLNK/S_IFREG/S_IFCHR/S_IFBLK/ S_IFIFO/S_IFSOCK type, use S_IFREG for $Extend records.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedDec 8, 2025
First seenDec 8, 2025
How to fix
Update
- Linux Linux63eb6730ce0604d3eacf036c2f68ea70b068317c, 78d46f5276ed3589aaaa435580068c5b62efc921, 17249b2a65274f73ed68bcd1604e08a60fd8a278, 37f65e68ba9852dc51c78dbb54a9881c3f0fe4f7, 57534db1bbc4ca772393bb7d92e69d5e7b9051cf, 4e8011ffec79717e5fdac43a7e79faf811a384b7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e ≤ v < 63eb6730ce0604d3eacf036c2f68ea70b068317c, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e ≤ v < 78d46f5276ed3589aaaa435580068c5b62efc921, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e ≤ v < 17249b2a65274f73ed68bcd1604e08a60fd8a278, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e ≤ v < 37f65e68ba9852dc51c78dbb54a9881c3f0fe4f7, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e ≤ v < 57534db1bbc4ca772393bb7d92e69d5e7b9051cf, 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e ≤ v < 4e8011ffec79717e5fdac43a7e79faf811a384b7, 5.15 | 63eb6730ce0604d3eacf036c2f68ea70b068317c, 78d46f5276ed3589aaaa435580068c5b62efc921, 17249b2a65274f73ed68bcd1604e08a60fd8a278, 37f65e68ba9852dc51c78dbb54a9881c3f0fe4f7, 57534db1bbc4ca772393bb7d92e69d5e7b9051cf, 4e8011ffec79717e5fdac43a7e79faf811a384b7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.