Linux Kernel Vulnerability Affecting NTFS3 Records

CVE-2025-40313

What is CVE-2025-40313?

The vulnerability in the Linux kernel pertains to the NTFS3 file system, where $Extend records were incorrectly handled as regular files due to improper inode type validation. Following recent updates, the kernel now ensures that any inode must conform to specific types—such as directories and regular files—by adjusting the handling of $Extend records to be treated as the regular file type (S_IFREG). This change addresses potential security concerns related to file system manipulation and enhances the overall integrity and reliability of file operations within the Linux environment.

References