Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-07-23 08:04 UTC
Importiert: 2026-07-29 11:39 UTC
CVSS: 7.8
Quelle-ID: thn_global
uid_hash: 93bb0e85c154c773b7cd0cd693106327c6e5219fe3f096c931642d0ae1f226cc

The Hacker News

Inhalt

RefluXFS, a Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access.

Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and Amazon Linux can meet the conditions for exploitation.

The company demonstrated the race against

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-64600	HIGH	7.8	HIGH	7.8			2026-07-23

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste