A critical out of bounds read vulnerability in the Linux kernel NTFS filesystem driver may allow an attacker to trigger system instability or information disclosure.

The vulnerability exists in the ntfs_cluster_alloc function, which fails to correctly bound scans of the free cluster bitmap against the actual volume size. An unauthenticated attacker can exploit this by providing a specially crafted NTFS filesystem image, leading to a slab out of bounds read when a file is extended.

The vulnerability carries a CVSS score of 9.8, indicating a critical severity level. Successful exploitation could lead to system crashes, denial of service, or potentially the exposure of sensitive kernel memory, which poses a significant risk to data integrity and system availability in environments where untrusted NTFS media is processed.

Immediate Action: Update the Linux kernel to version 7.2.4 or later to apply the necessary bounds checking patches.

Proactive Monitoring: Monitor system logs for kernel oops or KASAN reports that may indicate memory access violations during filesystem operations.

Compensating Controls: Restrict the ability to mount or interact with untrusted or external NTFS-formatted storage media on critical production systems.

Public Exploit Available: No (exploit_available: false)

Given the critical nature of this kernel-level memory safety issue, organizations should prioritize patching their Linux kernels to the latest stable release. If immediate patching is not feasible, administrators must strictly control the mounting of external NTFS volumes to prevent potential exploitation of the flaw.