CVE-2025-38707
kernel: fs/ntfs3: Add sanity check for file name
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · September 4, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Add sanity check for file name
The length of the file name should be smaller than the directory entry size.
Statement
This vulnerability poses no operational risk to Red Hat Enterprise Linux environments because the ntfs3 filesystem driver is not included or enabled in supported kernel builds. In upstream environments, exploitation typically requires mounting a specially crafted NTFS filesystem volume, which necessitates local privileged access or physical insertion of malicious storage media. Consequently, standard Red Hat kernel deployments remain unaffected by this flaw.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified