The Linux kernel’s NTFS driver contains a memory leak caused by a missing unmap of a kmap_local mapping during error paths in write_mft_record_nolock(). When the function returns via the error label, the mapped folio remains active, corrupting the stack‑ordered mapping hierarchy for the task. This invalid nesting can trigger kernel memory corruption, leading to a panic or crash that terminates the system. The flaw does not provide privilege escalation or data exfiltration, but it can cause a critical service disruption.

The attack affects all Linux kernels that include the default NTFS driver and lack the commit that inserts the missing unmap. Versions up to the 7.3 release candidate, and any earlier stable releases that have not applied this patch, are vulnerable. Kernel releases that have incorporated the commit are considered secure.

The CVSS score of 5.5 classifies this vulnerability as medium severity, and the EPSS score of less than 1% indicates a low likelihood of real‑world exploitation. It is not listed in the CISA KEV catalog. Based on the description, it is inferred that the vulnerability is most likely exploitable from a local context with sufficient privileges to trigger NTFS error conditions; no public exploits have been documented.