A nine-year-old race condition in the Linux kernel XFS filesystem lets any local user escalate to root on default enterprise Linux installations. Tracked as CVE-2026-64600 and dubbed RefluxFS, the flaw affects every kernel since version 4.11 (2017) and impacts an estimated 16.4 million systems worldwide. Qualys researchers discovered it using AI-assisted code analysis with Anthropic's Claude model, marking a notable milestone in AI-accelerated vulnerability research.
Vulnerability Details (CVSS 7.8, Emergency Priority)
CVE-2026-64600 is a local privilege escalation vulnerability in the XFS filesystem copy-on-write (CoW) path. An unprivileged local attacker can overwrite any readable file on a reflink-enabled XFS volume — including /etc/passwd or SUID-root binaries — gaining persistent root access. The exploit works under standard hardening (SELinux Enforcing, containers, KASLR, SMEP/SMAP) and leaves no kernel log artifacts.
| Property | Value |
|---|---|
| CVE ID | CVE-2026-64600 |
| CVSS 3.1 | 7.8 (High) — Qualys rates Emergency Priority |
| Attack Vector | Local |
| Attack Complexity | Low |
| Privileges Required | Low (ordinary user) |
| User Interaction | None |
| Affected Kernels | Linux 4.11+ (2017-present) |
| Fixed Kernels | Patched in stable/longterm branches, July 2026 |
Impact Assessment
The vulnerability is unusually severe for a local LPE:
- Default installations affected: RHEL 8/9/10, CentOS Stream, Oracle Linux, Rocky Linux, AlmaLinux, Amazon Linux 2023, and Fedora Server all use XFS with reflink=1 by default.
- 16.4 million systems: Qualys CyberSecurity Asset Management telemetry estimates this exposure across internet-facing and enterprise workloads.
- No practical mitigations: SELinux, seccomp, container namespaces, kernel lockdown, and memory protections (KASLR, SMEP, SMAP) do not block the exploit because the bug operates at the filesystem block-allocation layer.
- Persistence across reboots: On-disk modifications survive restart; no kernel log entries are generated.
- AI-assisted discovery: Qualys TRU used Anthropic's Claude Mythos Preview to identify the race condition, then human researchers validated and weaponized it — a hybrid workflow they call "responsible AI-accelerated research."
Affected Systems
Any Linux distribution meeting all three criteria is vulnerable:
- Kernel version 4.11 or later (released April 2017)
- XFS filesystem with reflink=1 (the default on RHEL-family distros)
- A writable directory for the attacker (e.g., /tmp, /home/user, /var/tmp)
Confirmed affected distributions (non-exhaustive):
- RHEL 8, 9, 10
- CentOS Stream 8, 9, 10
- Oracle Linux 8, 9, 10
- Rocky Linux 8, 9, 10
- AlmaLinux 8, 9, 10
- Amazon Linux 2023 and Amazon Linux 2 (AMIs from Dec 2022 onward)
- Fedora Server 31+
- Debian, Ubuntu, SUSE: only if XFS was manually selected at install with reflink=1
Mitigation & Patching
Immediate action required: Apply vendor kernel updates and reboot. No configuration workaround exists.
| Distribution | Advisory | Fixed Package |
|---|---|---|
| RHEL 8 | RHSA-2026:39179 | kernel-4.18.0-553.30.1.el8_10 |
| RHEL 9 | RHSA-2026:41062 | kernel-5.14.0-427.44.1.el9_4 |
| RHEL 10 | RHSA-2026:41063 | kernel-6.6.0-24.el10 |
| Oracle Linux 8 | ELSA-2026-39494 | kernel-uek-5.15.0-200.163.5 |
| Oracle Linux 9 | ELSA-2026-39494 | kernel-uek-6.8.0-200.163.5 |
| Amazon Linux 2023 | ALAS2026-1234 | kernel-6.1.100-140.183.amzn2023 |
| Fedora 40/41 | FEDORA-2026-085c9e92a4 | kernel-6.10.x |
| AlmaLinux/Rocky 8, 9, 10 | ALSA-2026:39179 / RLSA-2026:39179 | Respective kernel packages |
Verification: After reboot, confirm the fix with uname -r and check your vendor's security advisory for the exact fixed version. Qualys provides detection QIDs (e.g., QID 387841 for the vulnerability itself, plus distribution-specific QIDs listed in their advisory).
Detection
Since exploitation leaves no kernel logs, detection relies on:
- Vulnerability scanning: Qualys VMDR QIDs 387841, 6600012, 6053109, 6053104, 6052390, 6052332, 944816, 6052326, 289032, 6052307, 6052294, 6052291, 944834, 963680, 963688, 963682, 944802
- File integrity monitoring: Watch for unexpected changes to /etc/passwd, /etc/shadow, SUID binaries, or SSH authorized_keys files
- Auditd rules: Monitor
ioctl(FICLONE)andO_DIRECTwrite patterns on XFS mounts (high false-positive rate) - Post-exploitation forensics: Check file
ctime/mtimediscrepancies on critical system files; the on-disk modification timestamp will not match the inode change time
Technical Root Cause (Simplified)
The bug is a classic time-of-check-time-of-use (TOCTOU) race in XFS's reflink CoW path:
- Process A opens a target file (e.g., /etc/passwd) with
O_DIRECTand issues a write - XFS starts CoW: allocates a new block, prepares to remap the file extent
- To avoid deadlock, XFS drops the inode lock while waiting for log space
- Process B concurrently writes to the same reflinked file, completes its own CoW cycle, and drops the original block's refcount to 1
- Process A re-acquires the lock, sees refcount=1 (stale value from before the lock drop), assumes the block is private, and writes directly to the original physical block — corrupting the target file on disk
Because O_DIRECT bypasses the page cache, the write persists immediately. No revalidation occurs. The fix adds a revalidation step after re-acquiring the inode lock to confirm the physical block address hasn't changed.
Frequently Asked Questions
Q: Does this affect containers? A: Yes. The vulnerability operates at the filesystem block layer, below container namespaces. A compromised container with a writable XFS mount can escape to host root.
Q: Can SELinux block this? A: No. Qualys validation confirms the exploit succeeds under SELinux Enforcing mode on default RHEL policies.
Q: Is there a live-patching option (Kpatch, KernelCare, etc.)? A: Vendor live patches may become available, but a full reboot is required to ensure the new kernel is running. Qualys recommends rebooting after patching.
Q: What about systems using ext4, btrfs, or ZFS? A: Not affected. The bug is specific to XFS's reflink implementation. Systems using other filesystems for / are safe.
Q: How was AI involved in the discovery? A: Qualys TRU prompted Anthropic's Claude Mythos Preview to hunt for Dirty COW-style race conditions in the Linux kernel's memory-management and filesystem subsystems. The model identified the XFS reflink race and produced a working PoC. Human researchers then verified, refined, and coordinated disclosure. Qualys emphasizes this was expert-supervised, not autonomous AI vulnerability hunting.
Q: Where can I find the technical advisory and PoC details? A: Qualys advisory: https://blog.qualys.com/vulnerabilities-threat-research/2026/07/22/refluxfs-a-linux-kernel-local-privilege-escalation-to-root-in-xfs-cve-2026-64600 Technical details: https://cdn2.qualys.com/advisory/2026/07/22/RefluXFS.txt
Key Takeaways
- Patch immediately: This is not a theoretical vulnerability. Reliable exploits exist, affected systems number in the millions, and no mitigation works.
- Default configs are the risk: Enterprise Linux defaults (XFS + reflink) maximize exposure. Audit your fleet for XFS root filesystems.
- AI-assisted research is maturing: The Qualys-Anthropic collaboration demonstrates a reproducible workflow where LLMs accelerate expert discovery without replacing human validation.
- Filesystem-layer bugs bypass traditional hardening: Memory protections, syscall filters, and MAC systems operate above the block layer. Defense-in-depth must include filesystem integrity monitoring.
- Reboot is non-negotiable: Kernel patches only take effect after restart. Schedule maintenance windows now.
Sources:
- Qualys TRU Advisory: https://blog.qualys.com/vulnerabilities-threat-research/2026/07/22/refluxfs-a-linux-kernel-local-privilege-escalation-to-root-in-xfs-cve-2026-64600
- Qualys Technical Details: https://cdn2.qualys.com/advisory/2026/07/22/RefluXFS.txt
- The Hacker News: https://thehackernews.com/2026/07/nine-year-old-refluxfs-linux-flaw-gives.html
- BleepingComputer: https://www.bleepingcomputer.com/news/security/new-refluxfs-linux-flaw-lets-attackers-gain-root-privileges/
- Tech Times: https://techtimes.com/articles/300000/20260723/linux-kernel-flaw-exposes-16-million-rhel-systems-silent-root-takeover.htm
Automated Transmission
This entry was synthesized and populated dynamically using native API integrations.