Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
The Hacker News July 23, 2026

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

CVE-2026-64600 lets local users overwrite root-owned files on reflink-enabled XFS systems, preserving metadata and persistent root access after reboot

Advertisement

Advertisement

More like this