In Linux kernels using the built-in NTFS driver, the superblock can be cleared while an inode eviction is in progress. When the eviction path attempts to successively get the same attribute-list inode that is already marked for freeing, the VFS layer blocks waiting for the inode that is currently being evicted. The result is a self‑deadlock in find_inode(), which can halt VFS operations and cause a kernel freeze, leading to loss of service for processes relying on the filesystem. This weakness is essentially a race condition between inode state changes and lookup operations.

Any Linux kernel that contains the bundled NTFS driver and has not applied the patch referenced in the source commits is potentially impacted. No specific kernel versions are listed, so a wide range of kernel releases remain vulnerable until the fix is applied.

EPSS is not available and the vulnerability is not listed in CISA KEV, but the criticality is high because the deadlock can stop kernel services. The attack requires local access that can trigger inode eviction on an NTFS filesystem, so a privileged or local attacker can exploit it. Because the kernel cannot recover from this condition automatically, the consequence is a denial of service that may require a reboot or patching to resolve.