---
id: CVE-2025-40313
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ntfs3: pretend $Extend records as regular files

  Since commit af153bb63a33 ("vfs: catch invalid modes in may_open()")
  requires any inode be one of S_IFDIR/S_IFLNK/S_IFR…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ntfs3: pretend $Extend records as regular files

  Since commit af153bb63a33 ("vfs: catch invalid modes in may_open()")
  requires any inode be one of S_IFDIR/S_IFLNK/S_IFR…
severity: none
published: '2025-12-08'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T22:10:00.210'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-40313'
references:
  - url: 'https://git.kernel.org/stable/c/17249b2a65274f73ed68bcd1604e08a60fd8a278'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/37f65e68ba9852dc51c78dbb54a9881c3f0fe4f7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4e8011ffec79717e5fdac43a7e79faf811a384b7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/57534db1bbc4ca772393bb7d92e69d5e7b9051cf'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/63eb6730ce0604d3eacf036c2f68ea70b068317c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/78d46f5276ed3589aaaa435580068c5b62efc921'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00191
epssPercentile: 0.08162
ingestedAt: '2026-10-14T23:00:02.022Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ntfs3: pretend $Extend records as regular files

Since commit af153bb63a33 ("vfs: catch invalid modes in may_open()")
requires any inode be one of S_IFDIR/S_IFLNK/S_IFREG/S_IFCHR/S_IFBLK/
S_IFIFO/S_IFSOCK type, use S_IFREG for $Extend records.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.