A bounds check omission in the Linux kernel NTFS3 file system allows out of bounds memory operations via a maliciously crafted file system image.

This is an out of bounds memory vulnerability in the NTFS3 file system driver, specifically within the journal replay check functions where attacker controlled disk fields are used in memory movement calculations without prior validation.

Successful exploitation of this flaw can lead to severe system instability, denial of service, or potential arbitrary code execution within kernel space if an affected system mounts a malicious NTFS file system. Given the CVSS score of 7.8, the risk is high due to the potential for complete system compromise when interacting with untrusted storage media.

Immediate Action: Update the Linux kernel to version 5.15.209, 6.1.175, 6.6.136, or later where the NTFS3 journal replay boundary validation checks are correctly enforced.

Proactive Monitoring: Monitor kernel logs for filesystem corruption warnings, crash dumps, or unexpected kernel panics related to the ntfs3 module.

Compensating Controls: Restrict the mounting of untrusted or external NTFS storage devices using strict system policies until patches are deployed.

Public Exploit Available: No (false / unknown)

Administrators managing systems that process untrusted NTFS storage volumes must treat this high severity vulnerability with urgency. Apply the appropriate kernel updates immediately to prevent potential memory corruption and kernel level exploits originating from malicious storage media.