CVE Database›Document archive›CVE-2025-38707

CVE-2025-38707

kernel: fs/ntfs3: Add sanity check for file name

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · September 4, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Add sanity check for file name

The length of the file name should be smaller than the directory entry size.

Statement

This vulnerability poses no operational risk to Red Hat Enterprise Linux environments because the ntfs3 filesystem driver is not included or enabled in supported kernel builds. In upstream environments, exploitation typically requires mounting a specially crafted NTFS filesystem volume, which necessitates local privileged access or physical insertion of malicious storage media. Consequently, standard Red Hat kernel deployments remain unaffected by this flaw.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified