Linux Kernel AFS Filesystem Symlink Locking Vulnerability

A vulnerability in the AFS filesystem of the Linux kernel has been addressed, concerning improper locking mechanisms for symbolic links. The issues included a lack of locking around the 'afs_read_single()' function, which could lead to race conditions and data leaks during multiple '->get_link()' calls. Additionally, the filesystem did not properly use RCU barriers when accessing buffer pointers during RCU pathwalk, and it could experience race conditions with threads updating symlink contents from the server.

Impact

The vulnerability could cause data leaks and race conditions in the handling of symbolic links within the AFS filesystem.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.