{"uuid": "cd724af2-7d54-4f0b-9393-473fef03c640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://t.me/pphm_HackerNews/2249", "content": "\ud83d\udd34 Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs\n\nRefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access.\n\nQualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and Amazon Linux can meet the conditions for exploitation.\n\nThe company demonstrated the race against /etc/passwd and setuid-root binaries. The overwrite lands at the block layer. It survives a reboot and leaves the target's ownership, permissions, timestamps, and setuid bit untouched, so a modified setuid-root binary still runs as root.", "creation_timestamp": "2026-08-21T23:00:08.079214Z"}