In the Linux kernel, the run_unpack() function of the NTFS driver contains an integer overflow in the volume boundary check, where raw addition of large LCN and length values can wrap around. This flaw bypasses the intended validation and may allow an attacker to read or write data beyond the allocated buffer. The resulting memory corruption could compromise kernel confidentiality and integrity, and might lead to arbitrary code execution within the privileged kernel context, though these outcomes are not explicitly documented in the description.

All Linux kernel versions are potentially affected as the vulnerability resides in the core ntfs3 file‑system driver. No specific product or version is excluded by the available information.

The EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog. No CVSS score is provided, so the severity must be inferred from the code change. The likely attack vector is local, requiring an attacker with the ability to mount or otherwise cause the kernel to read a maliciously crafted NTFS volume. While no public exploit is documented, the kernel context and lack of mitigation measures make the risk moderate to high for systems that allow untrusted NTFS volumes to be mounted.