The Linux kernel contained a vulnerability in its NTFS filesystem code where the functions ntfs_ea_lookup and ntfs_listxattr accessed the next_entry_offset field of EA entries without verifying that sufficient space existed. This could lead to out-of-bounds memory access. The issue was resolved by adding proper bounds checking before accessing these EA entries to ensure memory safety.

Without proper bounds checking, the vulnerability could potentially cause memory corruption or kernel instability when processing NTFS Extended Attributes. However, no known exploits are reported in the wild, and the exact impact severity is not detailed in the available data.

A fix has been applied to the Linux kernel to add bounds checks before accessing EA entries in the affected functions. Users should update their Linux kernel to a version that includes this fix once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or kernel advisory for the current remediation status.