> TritonInfoSec News
Home / Jul 25, 2026 / Story
0
#9 BleepingComputer general July 23, 2026 at 11:40 UTC

New RefluXFS Linux flaw lets attackers gain root privileges

By Sergiu Gatlan

AI Summary

A nine-year-old race condition in the Linux kernel's XFS filesystem driver, tracked as CVE-2026-64600 and dubbed 'RefluXFS,' allows local attackers to overwrite protected files and escalate privileges to root. The vulnerability has existed since at least 2017, affecting a wide range of Linux distributions that use XFS as their default filesystem, including RHEL, CentOS, and Fedora variants. Local privilege escalation flaws in widely deployed Linux kernel filesystems present significant risk in shared hosting, container, and cloud environments.

Read full article → https://www.bleepingcomputer.com/news/linux/new-re…

Relevance score: 74.0/100

# More from July 25

  1. 1
    Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes The Hacker News
  2. 2
    Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller The Hacker News
  3. 3
    Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers The Hacker News
  4. 4
    Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say The Hacker News
  5. 5
    Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry The Hacker News
  6. 6
    Clop ransomware targets Windchill, FlexPLM in data theft attacks BleepingComputer
  7. 7
    Check Point warns of SmartConsole zero-day exploited in attacks BleepingComputer
  8. 8
    Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files The Hacker News
  9. 10
    ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link The Hacker News