A race condition vulnerability in the Linux kernel's NTFS fallocate implementation allows concurrent mmap reads to access uninitialized disk data, leading to potential information leaks and data integrity issues. The flaw arises because the invalidate_lock is not held during standard allocation modes, permitting mmap page faults to read old disk contents. The issue is fixed by ensuring the invalidate_lock is taken for all fallocate operations.