A high-severity memory corruption flaw in the Linux kernel NTFS driver enables local attackers to achieve system compromise or denial of service through malicious filesystem input.

This vulnerability is an out-of-bounds memory access issue caused by improper error handling in the ntfs_icx_ib_sync_write function. The driver incorrectly executes a fixup routine on invalid index blocks, which can be exploited by an authenticated local attacker providing a specially crafted NTFS image to trigger memory corruption.

Successful exploitation of this flaw allows an attacker to cause kernel-level memory corruption, which typically results in system instability, crashes, or potential execution of arbitrary code with elevated privileges. Given the CVSS score of 7.8, this represents a significant risk to data integrity and system availability, particularly for multi-user environments or systems that mount untrusted external storage.

Immediate Action: Update the Linux kernel to version 7.1.4 or later to apply the necessary boundary checks and error handling logic.

Proactive Monitoring: Monitor system logs for kernel panic events or KASAN-related reports that may indicate memory corruption attempts during filesystem mounting or write operations.

Compensating Controls: Restrict the ability of non-privileged users to mount external filesystems or loopback devices to reduce the attack surface until the kernel can be updated.

Public Exploit Available: Unknown.

This vulnerability presents a clear risk to system stability and security. Administrators should prioritize patching the Linux kernel to the corrected version as soon as it becomes available through their respective distribution channels. Limiting the ability of local users to interact with untrusted NTFS images is a recommended secondary measure to mitigate exposure while the update process is managed.