The vulnerability arises when the ntfs_setattr_size() function resizes a file’s on‑disk attribute without holding the invalidate_lock. A concurrent page fault can race with this resize, causing the system to resolve a Virtual Cluster Number against a transient runlist state and crash with SIGBUS. This race condition can terminate user processes and, if exploited repeatedly, disrupt availability of the affected file system. The weakness is a concurrency error where shared state is modified without proper synchronization.

All Linux kernels that include the current ntfs implementation and have not applied the patch that acquires invalidate_lock during the entire resize operation. No specific version list is provided, so any kernel building the ntfs module is potentially vulnerable.

The exploit requires a local user with permission to change the size attribute of an NTFS file on a mounted partition. Because the error only manifests under concurrency between the resizing path and page fault handling, it is not trivially exploitable remotely and no public exploit is known. The absence of a CVSS score and EPSS rating suggests the severity is high enough to warrant patching, but the likelihood of exploitation in the wild is currently unknown. The vulnerability is not listed in the CISA KEV catalog, indicating no widespread use cases have been reported.