The kernel bug occurs when ntfs drive handling fails to unmap a kmap_local page during certain error paths. Because kmap_local mappings are ordered per task, a single unmapped occurrence corrupts the stack ordering for all subsequent mappings in that context, which can lead to memory corruption or a kernel panic. This flaw allows an attacker to exploit the corrupted mapping order to manipulate kernel memory or cause a denial of service, effectively enabling privilege escalation or denial of service if the attacker can trigger the faulting path.

The flaw exists in the Linux kernel for all variants of the Open Source Linux distribution. No specific kernel releases are listed in the available data, so any installation that has not applied the upstream patch that removes the missing unmap will be affected.

Without a published CVSS score the exact severity cannot be quantified, but the potential to corrupt kernel memory classifies this as a critical vulnerability. The EPSS score is not available and the flaw is not listed in the CISA KEV catalog at this time. Because the bug requires local execution inside the kernel context, the likely attack vector is a locally privileged process. Mitigation therefore requires applying the kernel update that implements the unmap change; no temporary work‑arounds are documented in the advisory.