A critical out-of-bounds read vulnerability in the Linux kernel NTFS3 driver could allow an attacker to leak sensitive memory, potentially leading to information disclosure or system instability.

The vulnerability exists due to improper validation of Extended Attribute (EA) record sizes within the ntfs_read_ea function. An unauthenticated local attacker can provide a crafted NTFS image to trigger an out-of-bounds read, causing the kernel to copy data from outside allocated buffers to userspace via the getxattr system call.

The ability to perform an out-of-bounds read against the kernel poses a significant risk to system confidentiality and stability. An attacker may extract sensitive information from kernel memory, such as cryptographic keys or credentials, which facilitates further compromise. Given the CVSS score of 9.1, this flaw is categorized as critical, as it bypasses standard memory protections and grants unauthorized access to restricted kernel data.

Immediate Action: Update the Linux kernel to version 5.15.221, 6.1.188, 6.6.157, 6.12.110, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel-level memory errors or KASAN-related bug reports, which may indicate attempted exploitation of this memory corruption vulnerability.

Compensating Controls: Restrict the ability of untrusted users to mount arbitrary filesystems or images, particularly those using the NTFS3 driver, until the kernel has been patched.

Public Exploit Available: Unknown

This vulnerability represents a severe flaw in kernel memory management that necessitates immediate attention. Organizations should prioritize updating their Linux kernels to the specified patched versions to prevent potential memory leakage and system instability. Ensure that kernel update cycles are strictly enforced, especially on systems that interact with external or untrusted storage media.