The vulnerability in the Linux kernel NTFS driver (CVE-2026-72207) relates to the function ntfs_resident_attr_resize(). When this function cannot grow a resident attribute in place, it attempts to free space by converting other resident attributes to non-resident. However, it incorrectly selected zero-length resident $DATA attributes for conversion, which should not be done because fsck treats zero-byte non-resident $DATA attributes as corruptions. The fix prevents zero-length resident $DATA attributes from being selected for conversion, thereby avoiding potential file system corruption.

If unpatched, this vulnerability could lead to file system inconsistencies or corruption as detected by fsck, potentially affecting system stability or data integrity on NTFS volumes managed by the Linux kernel. There is no indication of remote code execution or privilege escalation from this issue.

A fix has been implemented in the Linux kernel to prevent zero-length resident $DATA attributes from being converted to non-resident. Users should update their Linux kernel to a version that includes this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the official Linux kernel advisories or repositories for the specific fixed version and apply the update accordingly.