The vulnerability (CVE-2026-53029) in the Linux kernel NTFS3 driver arises from a logic flaw where a zero length value causes the function ntfs_iomap_begin to use an uninitialized logical cluster number (lcn). Specifically, run_lookup_entry() fails early, setting length to zero, which leads to attr_data_get_block_locked() skipping necessary initialization and ultimately triggering use of an uninitialized lcn. The fix moves the zero length check earlier in ntfs_iomap_begin to prevent this condition. This flaw was detected by syzbot and affects multiple Linux kernel versions prior to 7.0.0-28.28 and related builds. The vulnerability impacts availability but not confidentiality or integrity, with a CVSS 3.1 vector of AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The vendor advisory from Ubuntu confirms the availability of patches in updated kernel packages and recommends rebooting after applying updates.

The vulnerability does not affect confidentiality or integrity but can cause a denial of service (availability impact) due to the use of uninitialized memory in the NTFS3 file system driver. This could potentially lead to kernel crashes or instability when handling NTFS file system operations. There are no known exploits in the wild at this time.

A patch is available and has been released by the vendor. Users should update their Linux kernel packages to versions 7.0.0-28.28 or later (and corresponding patched versions listed in the advisory) to remediate this issue. After applying the update, a system reboot is required to complete the remediation. Due to an ABI change, recompilation and reinstallation of third-party kernel modules may be necessary. No additional mitigation actions are required beyond applying the official fix.