⌁ CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2026-64600: RefluXFS Linux Kernel Flaw

July 23, 2026

A critical Linux kernel vulnerability in XFS filesystem reflink handling, allowing local privilege escalation to root. Affects Linux 4.11+ with reflink-enabled XFS. Discovered by Qualys using AI.

Discovered from: Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs