CVE-2025-71289

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-05-06 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle attr_set_size() errors when truncating files If attr_set_size() fails while truncating down, the error is silently ignored and the inode may be left in an inconsistent state.

Affected Software (8)

VendorProductVersion
Linux Linux 4342306f0f0d5ff4315a204d315c1b51b914fca5 < 20bfb08c8355b8300d2bbcaa4bbc24122a4b2d99
Linux Linux 4342306f0f0d5ff4315a204d315c1b51b914fca5 < 92300ac7ff17cad67ff2f3fbb7003afa326134e0
Linux Linux 4342306f0f0d5ff4315a204d315c1b51b914fca5 < 3a718675d6af4992e34ffe86b8f36d471a5afe0e
Linux Linux 4342306f0f0d5ff4315a204d315c1b51b914fca5 < d73dcd1520d65a34420761641a36b951b14c8c53
Linux Linux 4342306f0f0d5ff4315a204d315c1b51b914fca5 < 6dfea43d11513b7f2892529de55e8f0855108a2c
Linux Linux 4342306f0f0d5ff4315a204d315c1b51b914fca5 < 576248a34b927e93b2fd3fff7df735ba73ad7d01
Linux Linux 5.15
linux linux_kernel 5.15 – 6.19.6

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.26%
Raw Score 0.002610
Percentile 17.9%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00261
2026-10-31
0.00261
2026-10-30
0.00254
2026-10-29
0.00254

Intelligence Sources

mitre ref →
nvd ref →