RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600) | Qualys
Qualys Threat Research Unit identified CVE-2026-64600, a race condition in the Linux kernel's XFS copy-on-write path that lets an unprivileged local user overwrite any readable file on a reflink-enabled XFS volume at the block layer and gain host root. The...