What’s Vulnerable › Vulnerabilities

CVE-2025-38707: fs/ntfs3: Add sanity check for file name

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-04 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add sanity check for file name The length of the file name should be smaller than the directory entry size.

Affected products

• Debian Linux: 11.0
• Linux kernel: from 5.15 before 5.15.190; from 5.16 before 6.1.149; from 6.2 before 6.6.103; from 6.7 before 6.12.43; from 6.13 before 6.15.11; from 6.16 before 6.16.2 — fixed in 5.15.190, 6.1.149, 6.12.43, 6.15.11, 6.16.2, 6.6.103

How to fix

Upgrade to a fixed version: Linux kernel 5.15.190, 6.1.149, 6.12.43, 6.15.11. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/27ee9a42b245efe6529e28b03453291a775cb3e4
• https://git.kernel.org/stable/c/2ac47f738ddfc1957a33be163bc97ee8f78e85a6
• https://git.kernel.org/stable/c/3572737a768dadea904ebc4eb34b6ed575bb72d9
• https://git.kernel.org/stable/c/b51642fc52d1c7243a9361555d5c4b24d7569d7e
• https://git.kernel.org/stable/c/bde58c1539f3ffddffc94d64007de16964e6b8eb
• https://git.kernel.org/stable/c/e841ecb139339602bc1853f5f09daa5d1ea920a2
• https://git.kernel.org/stable/c/f99eb9a641f4ef927d8724f4966dcfd1f0e9f835
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
• https://cert-portal.siemens.com/productcert/html/ssa-032379.html

Get alerted when CVE-2025-38707 or the next vulnerability affects your stack