A missing boundary check in ntfs3's run_unpack() allows a 15‑byte out‑of‑bounds heap read when a truncated NTFS image is mounted. The kernel can read beyond the allocated buffer, potentially leaking kernel memory or causing a crash. This is a classic buffer‑over‑read flaw (CWE‑126).

All Linux kernel versions before the patch that introduces explicit boundary checks in ntfs3 run_unpack(). The vulnerability is tied to the generic Linux kernel and manifests in any kernel that includes the unpatched ntfs3 driver. No specific vendor or product version list beyond the kernel is provided.

The attack requires a crafted NTFS image that can be mounted with the ntfs3 driver. The likely attack vector is mounting that image on a local system or any system that has access to it. This inference is based on the fact that the vulnerability is triggered during filesystem mounting. No published exploit probability or CVSS score is available, and the vulnerability is not in the CISA KEV catalog. While the over‑read is limited to 15 bytes, the exposed memory may contain sensitive information or disrupt kernel stability. The actual risk depends on what kernel data is exposed and whether the attacker has higher privileges to use it.