SecurityLobstersabout 3 hours ago
RefluXFS: Linux XFS Race Condition Grants Root
1 min read
Qualys discovered CVE-2026-64600, a race condition in the Linux kernel's XFS copy-on-write path. An unprivileged local user can overwrite any readable file on a reflink-enabled XFS volume, gaining host root privileges. The flaw affects over 16.4 million systems, bypasses SELinux and kernel hardening, and leaves no kernel log output. Fixed kernels are available.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
