CVE-2026-64600 lets local users overwrite root-owned files on reflink-enabled XFS systems, preserving metadata and persistent root access after reboot
RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access.
… [+7085 chars]
Discussion (0)
No comments yet. Be the first to share your thoughts!
Join the Conversation
You need to be logged in to leave a comment.
Sign In Create Account