CVE-2025-38707: fs/ntfs3: Add sanity check for file name
fs/ntfs3: Add sanity check for file name
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
Add a sanity check in fs/ntfs3 to ensure the file name length is smaller than the directory entry size.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38707?
CVE-2025-38707 has been classified with a medium severity rating due to its potential impact on file name handling in the Linux kernel.
How do I fix CVE-2025-38707?
To mitigate CVE-2025-38707, update the Linux kernel to the latest version where this vulnerability has been patched.
What systems are affected by CVE-2025-38707?
CVE-2025-38707 affects various distributions of the Linux kernel that implement the NTFS3 file system.
What is the nature of CVE-2025-38707?
CVE-2025-38707 pertains to a vulnerability in the Linux kernel that lacks a sanity check for the length of file names relative to directory entry sizes.
When was CVE-2025-38707 discovered?
CVE-2025-38707 was resolved and disclosed as part of an update to the Linux kernel.