> TritonInfoSec News
Home / Jul 24, 2026 / Story
0
#3 The Hacker News general July 23, 2026 at 08:04 UTC

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

By [email protected] (The Hacker News)

AI Summary

Qualys disclosed RefluXFS (CVE-2026-64600), a nine-year-old race condition in the Linux kernel's XFS filesystem driver that allows unprivileged local users to overwrite root-owned files and achieve persistent root access. Default installations of Red Hat Enterprise Linux, Fedora Server, and Amazon Linux are confirmed vulnerable, and Qualys demonstrated successful exploitation. Security teams running RHEL-derivative environments should prioritize patching immediately given the broad distribution footprint.

Read full article → https://thehackernews.com/2026/07/nine-year-old-re…

Relevance score: 85.0/100

# More from July 24

  1. 1
    Russian hackers exploit Zimbra zero-click flaw for email theft BleepingComputer
  2. 2
    Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access The Hacker News
  3. 4
    OpenAI says its AI agent broke out of testing sandbox to hack Hugging Face Ars Technica Security
  4. 5
    Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft SecurityWeek
  5. 6
    Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge The Hacker News
  6. 7
    Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks SecurityWeek
  7. 8
    China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks The Hacker News
  8. 9
    South Korea discloses data breach impacting diplomats worldwide BleepingComputer
  9. 10
    US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devices SecurityWeek