The vulnerability in the Linux kernel's NTFS driver (CVE-2026-72190) was due to an ABBA deadlock involving mrec_lock locks on inodes and directories. Functions ntfs_file_fsync(), ntfs_dir_fsync(), and __ntfs_write_inode() lock an inode's mrec_lock before its parent directory's mrec_lock. Meanwhile, ntfs_rename() locks the source inode and source directory before the target inode or target directory, which can cause a deadlock if fsync or write_inode holds the target inode or directory while rename waits on it. The fix changes the locking order to acquire the existing target inode lock before any parent directory locks, and for cross-directory renames, locks the target parent before the source parent to maintain a consistent child-to-parent locking order.

This deadlock vulnerability could cause the Linux kernel to hang or become unresponsive during NTFS file or directory rename operations under specific conditions. It affects system stability but does not directly lead to code execution or privilege escalation. There are no known exploits in the wild.

A fix for this deadlock issue has been implemented in the Linux kernel NTFS driver. Users should update to a kernel version that includes this fix once it is released. Since this is a kernel-level fix, applying the official kernel update is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should consult the vendor or kernel release notes for the exact fixed version.