{"vulnerability": "CVE-2026-64600", "sightings": [{"uuid": "26c8f9ff-c5eb-423c-897d-a0e59b5231b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://t.me/ctinow/253790", "content": "RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)\u00a0\nhttps://ift.tt/GiDF5tH", "creation_timestamp": "2026-07-22T17:00:03.917408Z"}, {"uuid": "6b3050af-bb6e-4859-93de-c5cdbc92ddd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mratmy74ar2r", "content": "RefluXFS: LPE in the Linux kernel via XFS reflink race (CVE-2026-64600)", "creation_timestamp": "2026-07-22T17:23:30.265877Z"}, {"uuid": "126507d8-7c4f-4334-b367-982a90a7f114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/andersonc0d3.bsky.social/post/3mrau2s4yuc2z", "content": "RefluXFS: LPE in the Linux kernel via XFS reflink race (CVE-2026-64600)\n\nseclists.org/oss-sec/2026...", "creation_timestamp": "2026-07-22T17:31:16.752249Z"}, {"uuid": "8b6f6af0-7503-4c6c-94e5-37c2554d403c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://infosec.exchange/users/andersonc0d3/statuses/116964818174505407", "content": "RefluXFS: LPE in the Linux kernel via XFS reflink race (CVE-2026-64600)\nhttps://seclists.org/oss-sec/2026/q3/214", "creation_timestamp": "2026-07-22T17:31:28.629704Z"}, {"uuid": "efc980bc-a388-447e-bb87-88c338b52a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrav73m4dw23", "content": "Qualys discloses CVE-2026-64600 (RefluXFS), an XFS privilege escalation to root affecting 16.4M+ Linux systems. Patch the kernel and reboot now.\n\n#RefluXFS #CVE202664600 #LinuxKernel #PrivilegeEscalation #XFS #InfoSec", "creation_timestamp": "2026-07-22T17:51:31.840097Z"}, {"uuid": "73057ba9-bf78-45e5-9cbd-42e40034fc18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://t.me/ctinow/253790", "content": "RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)\u00a0\nhttps://ift.tt/GiDF5tH", "creation_timestamp": "2026-07-23T00:00:10.368851Z"}, {"uuid": "e522c489-0dd7-4abd-a5e5-8de3958a53e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrbkjhkx2t2l", "content": "Re: RefluXFS: LPE in the Linux kernel via XFS reflink race (CVE-2026-64600)", "creation_timestamp": "2026-07-23T00:13:08.548921Z"}, {"uuid": "377d71f9-d43b-48ec-9c5a-888b62dc7390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrbksgsgzs2u", "content": "Re: RefluXFS: LPE in the Linux kernel via XFS reflink race (CVE-2026-64600)", "creation_timestamp": "2026-07-23T00:18:09.536042Z"}, {"uuid": "92ffcfaf-0f59-438a-9328-cd7bf829a96e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/lobsters-feed.bsky.social/post/3mrbr2kw3oc2p", "content": "RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600) https://lobste.rs/s/tltlwf #security #linux ", "creation_timestamp": "2026-07-23T02:10:05.529623Z"}, {"uuid": "ff11ce53-f899-46b1-9f37-ef2d1b87d350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "Telegram/4io6jbku3v9BzbUr54C3quHavfK_B8Aga3a7QXo1aoyRkdw", "content": "", "creation_timestamp": "2026-07-23T04:00:05.077262Z"}, {"uuid": "a96b0414-0aae-401a-9484-e641147140b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://t.me/GithubRedTeam/94727", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-64600\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 21:10:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-64600\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:05.241263Z"}, {"uuid": "fac64403-c76b-43fc-bb29-9173ef69c889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64600", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mrc5poogqx2f", "content": "RefluXFS (CVE-2026-64600): Linux Kernel XFS Flaw Lets Local Users Gain Root by Overwriting Protected\u00a0Files\n\nLearn how the RefluXFS Linux kernel vulnerability (CVE-2026-64600) exploits an XFS copy-on-write race\u2026\n\nhttps://thecybersecguru.com/news/refluxfs-cve-2026-64600-linux-xfs-root-vulnerability/", "creation_timestamp": "2026-07-23T05:56:38.640613Z"}, {"uuid": "9951b531-b702-4c3a-b881-abf5d9dbec64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrcgfn3ykx2g", "content": "RefluXFS (CVE-2026-64600) lets local users gain root on Linux via XFS flaw. Patch now. #RefluXFS #LinuxKernel #CVE202664600 #XFS #SecurityFlaw #PatchNow thedailytechfeed.com/refluxfs-vul...", "creation_timestamp": "2026-07-23T08:32:06.128008Z"}, {"uuid": "03a96332-828b-4418-9b04-a0d9817f2d84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64600", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mrcmaujm2g23", "content": "Nine-Year-Old Linux Kernel Flaw Grants Root on Default RHEL Installs \u2014 Patch Now\n\nhttps://blindthoughts.com/refluxfs-linux-kernel-flaw-root-rhel-cve-2026-64600\n\n#linux #cve #privilegeescalation #rhel #kernel", "creation_timestamp": "2026-07-23T10:16:47.502367Z"}, {"uuid": "1801f277-0b7e-4e63-bb61-2d8dd1eaeca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrcqohhzcn2v", "content": "\ud83e\udd16 CVE-2026-64600 (RefluXFS): Linux kernel flaw gives persistent root on default RHEL/Fedora/Amazon Linux. 9-year-old race condition in XFS, PoC published by Qualys.\n\nhttps://thehackernews.com/2026/07/nine-year-old-refluxfs-linux-flaw-gives.html", "creation_timestamp": "2026-07-23T11:35:57.941964Z"}, {"uuid": "1cf26368-f86e-4a5d-b812-b0d2a8681cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mrcqwscexk2o", "content": "A nine-year-old race condition vulnerability in the Linux kernel's XFS filesystem, tracked as CVE-2026-64600, allows local attackers to overwrite protected files and gain root privileges.", "creation_timestamp": "2026-07-23T11:40:38.038587Z"}, {"uuid": "3d14d0b6-ba33-4797-bed9-ad1a255d9e13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mrcs3zzohb2k", "content": "Linux XFS \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306e\u7af6\u5408\u72b6\u614b\u8106\u5f31\u6027\u3001root\u6a29\u9650\u596a\u53d6\u304c\u53ef\u80fd\n\nLinux \u30ab\u30fc\u30cd\u30eb\u306e XFS \u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306b\u5b58\u5728\u3059\u308b 9 \u5e74\u524d\u306e\u7af6\u5408\u72b6\u614b\u8106\u5f31\u6027 CVE-2026-64600 \u306b\u3088\u308a\u3001\u30ed\u30fc\u30ab\u30eb\u653b\u6483\u8005\u304c\u4fdd\u8b77\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u3092\u4e0a\u66f8\u304d\u3057\u3066 root \u6a29\u9650\u3092\u596a\u53d6\u3067\u304d\u307e\u3059\u3002\u76f4\u3061\u306b\u30d1\u30c3\u30c1\u306e\u9069\u7528\u304c\u5fc5\u8981\u3067\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-07-23T12:01:28.047590Z"}, {"uuid": "ee27cddd-452b-4de7-bbcd-71d209090c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "Telegram/bSnNGG81Tfa4ZzCYQJT7Yhl3Lzwc1ptyxgLn3MJvAGoJufw", "content": "", "creation_timestamp": "2026-07-23T13:00:04.481292Z"}, {"uuid": "9885edd2-c620-4660-862d-086554a26ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://t.me/BleepingComputer/25177", "content": "\u200aNew RefluXFS Linux flaw lets attackers gain root privileges\n\nA nine-year-old race condition vulnerability in the Linux kernel's XFS filesystem, tracked as CVE-2026-64600, allows local attackers to overwrite protected files and gain root privileges. [...]\n\nhttps://www.bleepingcomputer.com/news/linux/new-refluxfs-linux-flaw-lets-attackers-gain-root-privileges/", "creation_timestamp": "2026-07-23T13:00:04.563337Z"}, {"uuid": "fea1ba30-34f7-4747-9a65-9b3450b56945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://thehackernews.com/2026/07/nine-year-old-refluxfs-linux-flaw-gives.html", "content": "RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access.\n\nQualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and Amazon Linux can meet the conditions for exploitation.\n\nThe company demonstrated the race", "creation_timestamp": "2026-07-23T13:01:02.899570Z"}, {"uuid": "39014a72-104f-44ad-a666-e5029070d348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mrcx6v4thy2p", "content": "RefluXFS (CVE-2026-64600): a 9-year-old XFS race condition in the Linux kernel lets any local user get root by racing O_DIRECT writes on a reflinked file. Affects ~16M RHEL/enterprise systems. Patch your kernel and reboot\u2014don't sit on this one. \ud83d\udee1\ufe0f\n\n#Linux #Security #Cybersecurity", "creation_timestamp": "2026-07-23T13:32:32.049982Z"}, {"uuid": "b05f4323-142b-4212-a3f2-b072d52111de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/tmgibs.bsky.social/post/3mrcxjmnntk2t", "content": "Qualys disclosed \u201cRefluXFS\u201d (CVE-2026-64600) on Tuesday, a race condition in the Linux kernel\u2019s XFS filesystem present since 2017\n\nThe flaw lets any unprivileged local user silently overwrite protected files to gain root access, bypassing SELinux and leaving no kernel logs", "creation_timestamp": "2026-07-23T13:38:34.432849Z"}, {"uuid": "d9322790-190b-46a9-a54c-99579099eb35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "Telegram/G7gh6nD4vTBaBHsx84JyRO9Z4uQ4qfzwao91GpvkL8WyWQ", "content": "", "creation_timestamp": "2026-07-23T14:00:03.781497Z"}, {"uuid": "4f579dbb-faa8-40b9-9bf8-4978c067c1b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrd2easkqs2l", "content": "XFS\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306b9\u5e74\u524d\u306e\u7af6\u5408\u72b6\u614b\u306e\u8106\u5f31\u6027(CVE-2026-64600)\u304c\u3042\u308a\u3001\u30ed\u30fc\u30ab\u30eb\u653b\u6483\u8005\u306b\u3088\u308a\u4fdd\u8b77\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u3092\u4e0a\u66f8\u304d\u3055\u308c\u3001root\u6a29\u9650\u3092\u596a\u53d6\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002", "creation_timestamp": "2026-07-23T14:29:13.418018Z"}, {"uuid": "8db0110b-958f-44eb-9d12-5c602e0ad13e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/116969900131286272", "content": "[VULN] \"Une faille dans le syst\u00e8me de fichiers XFS permet de prendre le contr\u00f4le d'une machine Linux\" CVE-2026-64600\ud83d\udc47 https://www.numerama.com/cyberguerre/2299983-refluxfs-la-faille-linux-qui-contourne-toutes-vos-protections-dort-depuis-2017-et-claude-mythos-la-trouvee.html\n\ud83d\udcac \u2b07\ufe0f https://infosec.pub/post/49886817\n#CyberVeille #Linux #XFS", "creation_timestamp": "2026-07-23T15:03:53.466839Z"}, {"uuid": "eaf0329e-72f5-4df3-8aff-a9daa89eb6a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/chrisdemars.net/post/3mrd6wy47wk2q", "content": "\ud83d\udea8 Tune in to The Weak Link today at 2 PM EST. We are going to cover a new exploit that surfaced, \"RefluXFS (CVE-2026-64600) XFS Root Flaw on RHEL Explained\".\n\ntuxcare.com/webinars/the...\n\n#DeveloperCommunity #DevSecOps", "creation_timestamp": "2026-07-23T15:51:17.459685Z"}]}