CVE-2025-40068 is a vulnerability in the Linux kernel's NTFS3 driver, specifically in the run_unpack function. An integer overflow in run_unpack could allow malformed Master File Table (MFT) runlist data to cause incorrect cluster calculations, potentially leading to unauthorized disk access or destruction of on-disk data. The Linux kernel has been updated to fix this issue. Discussions on WindowsForum.com cover the technical details of the vulnerability, its impact, and the patch that addresses it. This tag is relevant for users interested in Linux kernel security, NTFS3 driver issues, and CVE-2025-40068 specifically.
-
The Linux kernel has been updated to fix CVE-2025-40068, a newly assigned vulnerability in the ntfs3 driver where an integer overflow in run_unpack could allow malformed Master File Table (MFT) runlist data to cause incorrect cluster calculations and lead to unauthorized disk access or...