MEDIUMVulnerability
Global

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

·Source: The Hacker News

Updated:

Executive Summary

RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and Amazon Linux can meet the conditions for exploitation. The company demonstrated the race

Analysis

RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and Amazon Linux can meet the conditions for exploitation. The company demonstrated the race

Indicators of Compromise (1)

CVE (1)
CVE-2026-64600
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on Jul 23, 2026.

Related Threats

CRITICALVulnerability

Developing: AnMed reports phone and internet outage impacting all hospital locations; ERs remain open

Media outlets are reporting that all AnMed hospital locations are experiencing a phone and internet outage, but patients are being seen in the emergency rooms. AnMed is an independent, not-for-profit health system serving Upstate South Carolina and northeast Georgia with four hospitals: AnMed Medical Center, AnMed Cannon, AnMed Rehabilitation Hospital, and Regency Hospital – Upstate.... Source

DataBreaches.net
MEDIUMVulnerability

Steam forum ClickFix attacks infect gamers with XMRig cryptominers

Steam discussion forums are being abused in ClickFix attacks that pretend to be fixes for game and computer problems but actually infect devices with cryptominers. [...]

BleepingComputer
MEDIUMVulnerability

AU: Sydney nurse accused of downloading patients’ data in alleged ‘breach of trust’

Caitlin Powell reports: A male registered nurse from northern Sydney has been charged after allegedly downloading the data of multiple patients. Police received a report on Wednesday, July 22, that a NSW Health employee had allegedly accessed and downloaded patient information without authorisation. Detectives launched an investigation under Strike Force Civic and, after inquiries, searched a home

DataBreaches.net