The vulnerability resides in the Linux kernel’s NTFS driver and introduces an ABBA deadlock between extent_lock and extent mrec_lock during writeback paths. When both locks are acquired in opposite order, the kernel can become blocked, rendering the system unresponsive. The flaw does not provide privilege escalation or code execution; its primary impact is a denial of service by halting file system operations on NTFS partitions.

All Linux kernels that include the NTFS driver before the patch are potentially affected. It applies to any distribution that ships the default kernel with NTFS support. No specific kernel version range is listed, so any kernel variant that incorporates the vulnerable logic is at risk until the patch is applied.

The CVSS score of 7.5 and an EPSS score of < 1% indicate a moderate to high severity but low likelihood of exploitation. The nature of the defect suggests a local exploitation vector: an attacker with sufficient privileges to trigger concurrent writeback operations on NTFS volumes could induce the deadlock. Since the bug causes a system hang rather than a crash or data loss, its immediate seriousness remains moderate. It is not listed in CISA’s KEV catalog, indicating no known exploits at the time of assessment. Nonetheless, the potential for unplanned downtime warrants prompt remediation.