A critical buffer overflow vulnerability in the Linux kernel NTFS driver could lead to memory corruption and potential system instability when processing malicious file data.

This is an off-by-one page overflow vulnerability occurring within the ntfs_decompress function. An attacker can trigger this condition by providing a specially crafted or corrupted compressed NTFS data attribute, which causes the kernel to write data beyond the intended destination page boundaries.

Successful exploitation of this vulnerability can lead to system-wide instability, kernel panics, or potential arbitrary code execution. Given the CVSS score of 7.8, this flaw represents a significant risk to system integrity and availability, particularly for servers or workstations that mount untrusted NTFS filesystems.

Immediate Action: Update the Linux kernel to version 7.2.6 or later, or move to the 7.3 release branch where this issue is resolved.

Proactive Monitoring: Monitor system logs for kernel oops or unexplained crashes, particularly when interacting with external or untrusted storage volumes formatted with NTFS.

Compensating Controls: Avoid mounting NTFS filesystems from untrusted sources until the kernel has been patched to the recommended version.

Public Exploit Available: Unknown

This vulnerability presents a moderate risk to systems that process NTFS volumes. Administrators should prioritize updating the Linux kernel to the provided fixed versions to eliminate the risk of memory corruption. Applying the patch is the only effective way to remediate this logical flaw in the filesystem driver.