Impact
A lock inversion deadlock in the Linux kernel’s NTFS‑3G implementation is triggered when concurrent read operations on compressed NTFS pages cause a task to hold a page lock while waiting for the inode mutex, and another task to hold that inode mutex while waiting for the same page lock, leading to a hung kernel thread and a denial‑of‑service condition.
Affected Systems
Linux kernel implementations that include the ntfs3 driver before the patch commits cfe246b3181/e37a75bb866c are affected. The bug resides in the ntfs_read_folio() and ni_read_folio_cmpr() paths of the ntfs3 filesystem module. No specific vendor release numbers are listed, but the vulnerability can be present in any kernel release that has not yet incorporated the deadlock fix.
Risk and Exploitability
Exploitation requires local access to a system with an NTFS‑3G mount and the ability to trigger concurrent read operations, such as by performing background scans or enabling readahead. An adversary could provoke the deadlock by accessing compressed NTFS pages while another read process proceeds, causing kernel thread hangs and potential system unresponsiveness. The EPSS score is unavailable and the vulnerability is not listed in the CISA KEV catalog, but the nature of the deadlock means any such concurrency can lead to denial‑of‑service, classifying the risk as high in environments that rely heavily on NTFS‑3G mounts.
OpenCVE Enrichment