The Linux kernel NTFS driver parses the MFT and MFTMirr locations from the NTFS boot sector as signed 64-bit integers instead of unsigned 64-bit integers. This parsing error allows crafted high-bit values to become negative and bypass upper-bound validation. Consequently, invalid values propagate into the MFT zone allocator, potentially leading to out-of-bounds access to the lcn_empty_bits_per_page data structure. This vulnerability has been resolved in the Linux kernel.

The vulnerability could lead to out-of-bounds memory access within the kernel's NTFS driver, which may cause system instability or potential memory corruption. No specific exploitation details or in-the-wild exploits are reported.

A fix has been applied in the Linux kernel to correctly parse the MFT and MFTMirr locations as unsigned 64-bit values, preventing invalid values from bypassing validation. Users should update to the fixed Linux kernel version once available. Patch status is not explicitly confirmed in the provided data; check the official Linux kernel advisories for the exact fixed versions and update guidance.