Get real-time updates on Telegram
CVE-2025-40067: Linux 6.17
CVE-2025-40067. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00165 (percentile 0.05424), scored 19-Oct-2026.
Affected technology
Linux · b35a50d639ca5259466ef5fea85529bb4fb17d5b to before 978aac54e93ea35aab20b32ae393d3d33964e7ae, 3ed2cc6a6e93fbeb8c0cafce1e7fb1f64a331dcc to before be66551da203862c689c12e1d35ce87217c017c1, d99208b91933fd2a58ed9ed321af07dacd06ddc3 to before 039ddf353cc33f6546a87ec1ac3210637d714bec, d99208b91933fd2a58ed9ed321af07dacd06ddc3 to before 0dc7117da8f92dd5fe077d712a756eccbe377d40, 358d4f821c03add421a4c49290538a705852ccf1, a285395020780adac1ffbc844069c3d700bf007a, 6.6.102 to before 6.6.112, 6.12.42 to before 6.12.53, 6.15.10 to before 6.16, 6.16.1 to before 6.17
Linux
Linux · 6.17
Linux
Component: Not specified by the source
File: fs/ntfs3/index.c
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · User interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00165 · percentile 0.05424 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40067.html