CVE-2025-38707

fs/ntfs3: Add sanity check for file name

HIGH

7.8

CVSS Score

Published: September 4, 2025 at 03:32 PM UTC

Updated: October 19, 2026 at 09:10 PM UTC

3 products affected across 3 vendorsLinux KernelDebian LinuxSIMATIC CN 4100

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add sanity check for file name The length of the file name should be smaller than the directory entry size.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

All versions5.15 ≤ v < 5.15.1905.16 ≤ v < 6.1.1496.13 ≤ v < 6.15.116.16 ≤ v < 6.16.26.2 ≤ v < 6.6.1036.7 ≤ v < 6.12.434534a70b7056fd4b9a1c6db5a4ce3c98546b291e5.15

Vendor states this is fixed in 27ee9a42b245efe6529e28b03453291a775cb3e4 (fixed)

Vendor states this is fixed in 2ac47f738ddfc1957a33be163bc97ee8f78e85a6 (fixed)

Vendor states this is fixed in 3572737a768dadea904ebc4eb34b6ed575bb72d9 (fixed)

Vendor states this is fixed in b51642fc52d1c7243a9361555d5c4b24d7569d7e (fixed)

Vendor states this is fixed in bde58c1539f3ffddffc94d64007de16964e6b8eb (fixed)

Vendor states this is fixed in e841ecb139339602bc1853f5f09daa5d1ea920a2 (fixed)

Vendor states this is fixed in f99eb9a641f4ef927d8724f4966dcfd1f0e9f835 (fixed)

Vendor states this is fixed in 5.15 (unaffected)

Vendor states this is fixed in 5.15.190 (unaffected)

Vendor states this is fixed in 6.1.149 (unaffected)

Vendor states this is fixed in 6.12.43 (unaffected)

Vendor states this is fixed in 6.15.11 (unaffected)