The Linux kernel NTFS driver contained a vulnerability in the ntfs_ir_to_ib() function where entries from index_root were copied into a newly allocated buffer without verifying that the entries fit within the allocated index_block_size. This lack of bounds checking could lead to heap out-of-bounds writes. The existing validator ntfs_index_root_inconsistent() checked internal consistency but did not validate against the buffer size, allowing structurally valid but oversized entries to cause memory corruption. The fix adds bounds checking at the sink function ntfs_ir_to_ib(), preventing OOB writes. The vulnerability can be triggered by a crafted NTFS filesystem image, which is outside the kernel threat model but fixing memory errors improves security robustness.

Successful exploitation can cause heap out-of-bounds writes leading to potential memory corruption, which may result in confidentiality, integrity, and availability impacts on the affected system. The CVSS 3.1 score is 7.8 (high), reflecting the potential for significant damage if exploited. However, exploitation requires a crafted filesystem image, which is not typically considered within the kernel threat model.

A fix is available that adds proper bounds checking in the ntfs_ir_to_ib() function to prevent out-of-bounds writes. Users should apply the official Linux kernel updates that include this patch. Since this is a kernel vulnerability, upgrading to a patched kernel version is the recommended mitigation. No additional mitigations are indicated by the vendor advisory.