CVE-2021-47351: 
Linux Kernel vulnerability analysis and mitigation

CVE-2021-47351 affects the Linux kernel's UBIFS (UBI File System) implementation. The vulnerability involves race conditions between xattr_{set|get} and listxattr operations that can lead to various issues including assertion failures, memory corruption, and stale xattr values. This vulnerability was discovered and reported in 2021, affecting the UBIFS component since its introduction (Kernel Git).

The vulnerability stems from improper synchronization in the UBIFS extended attribute (xattr) operations. The issue occurs during concurrent xattr_{set|get} and listxattr operations, where race conditions can lead to inconsistent states. The vulnerability exists because of missing proper locking mechanisms to serialize write operations on xattr while allowing concurrent read operations (Kernel Git).

The vulnerability can result in several adverse effects including assertion failures, memory corruption, and stale xattr values in the UBIFS filesystem. These issues could potentially lead to system instability, data corruption, or denial of service conditions (Kernel Git).

The vulnerability requires local access to a system using the UBIFS filesystem and the ability to perform concurrent extended attribute operations. No public exploits have been identified, though the vulnerability has been confirmed through technical analysis (NVD).

The issue has been fixed by implementing a new rw-lock in the ubifs_inode structure to serialize write operations on xattr while maintaining concurrent read operations effectiveness, similar to the ext4 filesystem implementation. The fix was committed to the Linux kernel mainline and backported to stable kernel versions (Kernel Git).