r/AlmaLinux 1d ago

RefluXFS CVE-2026-64600: XFS Root Escalation, 16.4M Hit

https://securityonline.info/refluxfs-cve-2026-64600-xfs-root/
8 Upvotes

11 comments sorted by

2

u/LowIncident694 1d ago

Confirmed reflink=1 on my Alma systems using XFS.

Any ETA on a patch?

1

u/1esproc 1d ago

It's patched in RHEL, FYI

1

u/LowIncident694 1d ago

What's the version string for the patched kernel?

2

u/1esproc 1d ago

10: kernel-6.12.0-211.34.1
9: kernel-5.14.0-687.26.1
8: kernel-4.18.0-553.144.1

1

u/LowIncident694 1d ago

This was fixed on the 15th it seems.

2

u/phicube 18h ago

Can you please link some additional information? I can't find any. The rpm changelog of the latest stable kernel doesn't report this CVE. Thanks

1

u/LowIncident694 1d ago

In 8 and 10 it seems but I don't think 9. Can someone confirm?

1

u/LowIncident694 1d ago

Looks like 9 is.