The vulnerability (CVE-2025-71309) in the Linux kernel NTFS3 driver was a deadlock caused by lock inversion between the inode mutex (ni_lock) and page locks during compressed frame reads. Specifically, one task holding ni_lock waited for a page lock held by another task, while that second task waited for ni_lock, creating a circular wait and deadlock. The resolution involved removing the acquisition of ni_lock in ntfs_read_folio() and instead acquiring it only after all required page locks for the compressed frame are secured in ni_read_folio_cmpr(), restoring the correct lock ordering (Page Lock -> ni_lock) consistent with VFS.

The deadlock could cause tasks performing NTFS compressed page reads to hang indefinitely, leading to a denial of service condition on affected systems. There is no impact on confidentiality or integrity, but availability is affected due to the task hang.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The fix involves restructuring the locking order in the NTFS3 driver as described. Until an official patch is available, avoid workloads that trigger compressed page reads on NTFS3 or monitor for hangs related to this issue.