The Linux kernel's ntfs_mapping_pairs_decompress() function contained an off-by-one error in its bounds checks for mapping pair data bytes. Specifically, the code used strict greater-than (>) comparisons to validate that buffer accesses did not exceed the attribute record boundary, allowing a read of one byte past the valid memory when the buffer end equaled the attribute end. This was corrected by changing the checks to use greater-than-or-equal (>=), ensuring that any attempt to read exactly at the boundary is correctly rejected, preventing out-of-bounds reads.

This vulnerability could lead to a one-byte out-of-bounds read in kernel memory when processing NTFS attributes. While the impact details such as privilege escalation or denial of service are not provided, out-of-bounds reads can potentially cause system instability or information disclosure depending on context. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to correct the off-by-one error by adjusting the bounds checks. Users should apply the official kernel updates that include this fix once available. Patch status is not yet confirmed in the provided data; check the vendor's advisory for current remediation guidance.