A race condition vulnerability in the Linux kernel NTFS implementation poses a high risk of information disclosure and system instability for local users.

This flaw is a race condition in the NTFS driver where resident iomap reads are performed without acquiring the required mrec_lock. This allows a local, low-privileged attacker to trigger a data race with other filesystem operations, potentially resulting in the disclosure of sensitive kernel memory or system crashes.

Successful exploitation of this vulnerability allows a local user with low privileges to bypass memory protections, leading to unauthorized access to sensitive information or a denial of service through kernel panic. Given the CVSS score of 7.1, this represents a significant security risk for multi-user Linux environments or systems where untrusted users have local shell access. Compromise could result in the leakage of kernel-level data, which may facilitate further privilege escalation attacks.

Immediate Action: Update the Linux kernel to version 7.2.6 or later, which contains the necessary locking patches to prevent the race condition.

Proactive Monitoring: Monitor system logs for kernel oops or crash reports that may indicate exploitation attempts targeting the filesystem driver.

Compensating Controls: Restrict access to the system to authorized users only, as the attack vector requires local access to the filesystem. Ensure that untrusted users do not have permissions to mount arbitrary NTFS volumes.

Public Exploit Available: No (exploit_available is false)

This vulnerability highlights the importance of keeping kernel components up to date, especially those handling complex filesystem logic. Administrators should prioritize patching systems that utilize the NTFS driver, particularly in environments hosting multiple users or containers, to mitigate the risk of local information disclosure. Apply the recommended kernel updates as part of the next scheduled maintenance window.