A critical vulnerability in the Linux kernel NTFS driver can lead to potential system compromise or instability via out-of-bounds memory access.

The NTFS driver improperly decodes MFT location values from the boot sector, allowing a high-bit value to become negative and bypass bounds checking. This results in an out-of-bounds access to memory during MFT zone allocation, which can be triggered by an unauthenticated attacker.

Successful exploitation of this vulnerability can result in a system crash (Denial of Service) or potential arbitrary code execution, depending on the memory layout. Given the CVSS score of 9.8, this flaw represents a significant risk to system integrity and availability, necessitating immediate attention for any environment utilizing the NTFS driver.

Immediate Action: Update the Linux kernel to version 7.2.4 or later, or apply the upstream patches identified by commits 8f8420b68a6f05ca2b03779d8208814ec539b9e5 or cc9d09fef78410bcd37ac05168cbd5f6dd75d3d2.

Proactive Monitoring: Monitor system logs for kernel panics or unusual memory access errors associated with file system operations.

Compensating Controls: If patching is delayed, restrict the mounting of untrusted or externally sourced NTFS-formatted volumes on sensitive systems.

Public Exploit Available: No (exploit_available: false)

The severity of this vulnerability, combined with its location in the core kernel, makes it a high-priority item for maintenance teams. Organizations should prioritize the deployment of the kernel update to version 7.2.4 or higher to eliminate the risk of out-of-bounds memory access.