In the Linux kernel, the run_unpack() function of the NTFS driver contains an integer overflow in the volume boundary check, where raw addition of large LCN and length values can wrap around. This flaw bypasses the intended validation and may allow an attacker to read or write data beyond the allocated buffer. The resulting memory corruption could compromise kernel confidentiality and integrity, and might lead to arbitrary code execution within the privileged kernel context, though these outcomes are not explicitly documented in the description.

All Linux kernel versions are potentially affected as the vulnerability resides in the core ntfs3 file‑system driver. No specific product or version is excluded by the available information.

The EPSS score of <1% indicates a very low but non‑zero probability of exploitation, and the vulnerability is not listed in CISA’s KEV catalog. The CVSS score of 7.8 reflects a high severity, indicating significant impact if successfully exploited. The likely attack vector is local, requiring an attacker to orchestrate the kernel into reading a maliciously crafted NTFS volume. No public exploit is documented, but the kernel context and absence of mitigation mean the risk remains moderate to high for systems that permit untrusted NTFS volumes to be mounted.