The vulnerability exists in the Linux kernel's NTFS driver. During error paths of write_mft_record_nolock(), a kmap_local mapping is not released, leaking a folio. Because kmap_local mappings are ordered per task, the leak corrupts the mapping stack and can lead to kernel memory corruption or a kernel panic, causing a denial of service within the kernel. No elevation of privilege or data exfiltration capabilities are indicated by the description.

All variants of the Linux kernel are potentially affected until the upstream patch that adds the missing unmap is applied. The advisory does not list specific releases, so any installation running a kernel that includes the buggy ntfs driver and has not incorporated the referenced commit is considered vulnerable.

The CVSS score of 5.5 indicates a medium severity, while the EPSS score of <1% suggests a low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a local process with sufficient privileges to trigger the NTFS error paths; this is inferred from the need to execute code in the kernel context. No publicly documented exploits are referenced.