A vulnerability in the Linux kernel's NTFS implementation involves improper handling of attribute record resizing. Specifically, the attribute payload is moved after shrinking its record, causing memory corruption that leads to malformed mapping pairs arrays. This issue has been resolved by changing the order of operations to move the payload before shrinking the record.