CVE-2026-64057

A flaw was found in the Linux kernel's AFS (Andrew File System) component. This vulnerability involves incorrect locking when processing symbolic links, which can lead to race conditions and memory leaks. These issues could result in resource exhaustion and impact system stability.

This vulnerability is rated as Moderate impact because exploitation requires local access on a system with an active AFS mount and primarily results in memory exhaustion or system denial of service, without enabling privilege escalation or confidentiality loss. The in-kernel AFS filesystem client is not mounted or actively utilized by default in standard Red Hat enterprise environments. Therefore, systems are only exposed if administrators have explicitly mounted Andrew File System shares accessible to unprivileged local users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.