Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

thehackernews.com

-4

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

thehackernews.com

madthumbsM to

LinuxsucksEnglish · 5 days ago

CVE-2026-64600 lets local users overwrite root-owned files on reflink-enabled XFS systems, preserving metadata and persistent root access after reboot

CVE-2026-64600 lets local users overwrite root-owned files on reflink-enabled XFS systems, preserving metadata and persistent root access after reboot

You must log in or # to comment.

Chat

Linuxsucks

linuxsucks

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]

For knowledge and awareness about what using Linux is really like and pointing at its cultish toxic community. We also cover FOSS /FLOSS failures, and issues with GPL since it relates to Linux. Moderation is heavy handed to appeal to our target users.

Rules:

FOSS (especially GPL) advocates and Linux (specifically GNU/Linux) evangelists aren’t welcome (GNU Hurd will count as Linux). -We ask that you block us and we will perma-ban for violations of this rule.
Try to stay on topic (that is LINUXSUCKS!). No bashing other OSs or each other. We aim for a cohesive non-toxic community with the interest of cautioning people / would be victims from Linux. At our discretion, we will remove what we consider pollution.
Moderators run the sub, not the users. It’s not democratic, and we don’t care how you think it should be run. -Feel free to make and run your own community.
“Not your Billboard” -Over-represented companies will have positive posts removed and appropriate bans may be issued. -Those companies included so far will be Valve/Steam/Proton, Google, and Brave (browser).