The kernel defect centers on the NTFS trim logic. The function first aligns the start of a free extent to the device's discard granularity but then aligns the original extent length downward to calculate the discard length. When the extent start is not discard‑aligned, adding the mis‑derived length to the aligned start can extend the discard slice beyond the actual free space, wiping into allocated clusters. In test scenarios on a 4 KiB‑cluster NTFS filesystem with 32 KiB discard granularity, the bug caused seven allocated 4 KiB clusters to be zeroed, corrupting file contents. This flaw can lead to unintended loss of user data and integrity violations for any file system using the affected logic.

The vulnerability is present in the Linux kernel NTFS filesystem implementation. All Linux distributions shipping an unpatched kernel are susceptible; the issue applies to any configuration that uses NTFS with discard support. No vendor‑specific product names are listed beyond the generic Linux kernel.

The flaw is local, triggered by the FITRIM ioctl or other discard requests on an NTFS partition. An attacker would need elevated privileges or the ability to issue a trim command, suggesting a local privilege escalation or malicious application scenario. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating no documented mass exploitation. Without the patch, the risk is significant data loss; after applying the fix, the danger is mitigated.