Technology

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs - The Hacker News

CVE-2026-64600 lets local users overwrite root-owned files on reflink-enabled XFS systems, preserving metadata and persistent root access after reboot

The Chairman's DailyThursday, July 23, 20262 min read

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs - The Hacker News

RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access.

… [+7085 chars]

Share this article

The Chairman's Daily

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs - The Hacker News

Related Stories

AMD EPYC 9006 Venice Announced & Looks Poised To Be A Grand Slam - Phoronix

OpenAI is making big claims as it rolls out ChatGPT Health to everyone - The Verge

OpenAI makes ChatGPT Health available to all US users - TechCrunch