The Linux kernel’s NTFS driver implemented a blocking allocation in the d_compare() function by calling __getname(), causing the kernel to sleep during path resolution. This behavior can stall kernel execution and initiate a denial‑of‑service cycle if exercised repeatedly. The patch replaces that call with non‑blocking kmalloc(PATH_MAX, GFP_NOWAIT), removing the ability for the kernel to block.

Linux kernels that ship with NTFS support and have not yet incorporated the commit identified by the advisory. This encompasses any distribution using the standard kernel with NTFS enabled prior to the fix. No specific version range is listed, so all pre‑patch kernels are considered affected.

Because the issue relies on a blocking kernel call an attacker who can trigger ntfs->d_compare()—for example by performing certain file system operations on NTFS volumes—is likely able to cause a kernel stall, leading to a denial of service. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, indicating no known widespread exploitation yet. The nature of the flaw and the lack of public exploitation data suggest that the primary risk is a DoS should the kernel be forced to sleep during NTFS operations.