The vulnerability occurs in the Linux kernel's NTFS3 driver where inline data is allocated with kmemdup, which does not guarantee page alignment. The inline_data validity check requires the data to fit within a page, and the lack of alignment can cause the check to fail, potentially leading to incorrect handling of data, memory corruption, or a system crash. This flaw could be exploited by an attacker with local access to the system, allowing them to destabilize or crash the kernel when accessing NTFS volumes.

All Linux kernel installations that use the NTFS3 filesystem module and did not apply the patch that replaces kmemdup with alloc_page. No specific kernel versions are listed; affected releases include any kernels prior to the commit that introduced the fix.

The vulnerability does not appear in the CISA KEV catalog and the EPSS score is not available, indicating no public exploitation reports. However, because the flaw can cause a denial of service by crashing the kernel when handling NTFS files, its impact is high for systems that rely on NTFS3. The patch required is small and contained in the kernel itself. If a system is running an unpatched kernel and is exposed to NTFS volumes, the risk of accidental or malicious crashes remains significant.