Get real-time updates on Telegram
CVE-2025-40068: Linux 5.15
CVE-2025-40068. CVSS 3.1 base score 8.4 (HIGH, Source advisory). EPSS 0.00182 (percentile 0.07305), scored 19-Oct-2026.
Affected technology
Linux · 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before f6b36cfd25cbadad63447c673743cf771090e756, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 3ac37e100385b59ac821a62118494442238aaac4, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before a86c8b9d03f7101e1750233846fe989df6f0d631, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 9378cfe228c2c679564a4116bcb28c8e89dff989, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 5aa5799d162ad1b8e8b699d48b6218143c695a78, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 736fc7bf5f68f6b74a0925b7e072c571838657d2
Linux
Linux · 5.15
Linux
Component: Not specified by the source
Function: decodes, logic
File: fs/ntfs3/run.c
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 33.6 /100 (P4)
- CVSS 3.1
- 8.4 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00182 · percentile 0.07305 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40068.html