The Linux NTFS module contains a flaw where the function that zeros newly allocated clusters ignores any failure returned from the underlying zeroing call. Because the error check in ntfs_attr_fallocate never fires, a zeroing failure is silently ignored and the allocation proceeds, leaving stale or incorrect data on disk while the file write completes successfully. This results in data integrity corruption whenever an allocation is attempted on an NTFS filesystem that triggers the zeroing routine.

All Linux kernel builds that include NTFS support are affected, as the vulnerability resides in the core ntfs module of the kernel. No specific version ranges are provided, so any kernel that has not incorporated the patch will be vulnerable.

The CVSS score is not supplied and EPSS data is unavailable, making it difficult to quantify exploitation probability. The vulnerability is not listed in CISA’s KEV catalog, indicating no known active exploitation. The likely attack vector requires local write access to an NTFS partition with sufficient privileges to trigger a fallocate operation; a privileged user could therefore introduce data corruption that may lead to loss of information, denial of service, or serve as a stepping stone for further privilege escalation.