Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
Long-standing XFS kernel flaw exposes RHEL, Fedora, and Amazon Linux to root-level privilege escalation attacks.
RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise Linux and its derivatives...
The Hacker News
Source
Generated insight by OnAirToday AI
This vulnerability highlights the significant security risk posed by legacy code that remains embedded within critical Linux kernel filesystems for nearly a decade. It demonstrates how race conditions can persist undetected in enterprise environments, potentially turning standard system configurations into major vectors for unauthorized root access.
Comments
Keep comments relevant and respectful. No links, advertising, self-promotion, or spam.