New Linux Kernel Vulnerability "RefluXFS" Grants Root Access via XFS Race Condition A critical Linux kernel vulnerability, CVE-2026-64600 (dubbed RefluXFS), has been disclosed by Qualys Threat Research Unit (TRU), allowing unprivileged local users to overwrite protected system files and escalate to root privileges even on systems with SELinux in Enforcing mode. The flaw stems from a race condition in the XFS filesystem’s copy-on-write (CoW) path, triggered when two concurrent O_DIRECT writes target the same reflinked file. ### How the Exploit Works XFS normally handles reflinked file writes by allocating new blocks, but the kernel briefly drops its inode lock while waiting for transaction log space. During this window, a second write operation can remap the file and drop the reference count, causing the first write to corrupt the original block using a stale reference. Since O_DIRECT bypasses the page cache, the malicious write persists on disk without leaving kernel logs, making detection nearly impossible. Qualys demonstrated a proof-of-concept on a default RHEL 10.2 deployment, silently removing the root account’s password protection in seconds, granting passwordless root access that survives reboots. ### Scope & Impact - Affected Systems: Linux kernels 4.11+ (since 2017), including RHEL 8/9/10, CentOS Stream, Oracle Linux, Rocky/AlmaLinux, Amazon Linux 2023, and Fedora 31+. - Lower-Risk Distros: Debian, Ubuntu, and SUSE are only vulnerable if XFS is manually configured with `reflink=1`. - Conditions for Exploitation: - Kernel 4.11+ without the patch. - XFS filesystem with `reflink=1` enabled. - A writable directory for an unprivileged user and a high-value target (e.g., SUID-root binary). - Estimated Impact: Over 16.4 million systems worldwide, per Qualys’ analysis. ### Security Bypass & No Workarounds The flaw operates below conventional kernel hardening mechanisms, evading protections like: - KASLR, SMEP, SMAP (memory protections). - Kernel lockdown (no restriction on O_DIRECT/FICLONE). - SELinux (does not block the vulnerable code path). - Container isolation (user-namespace restrictions and capability limits fail to mitigate). No reliable workaround exists patching is the only solution. ### AI-Assisted Discovery & Broader Trend The vulnerability was identified through a joint research initiative between Qualys and Anthropic, using Claude Mythos Preview to hunt for Dirty COW-style race conditions. After iterative prompting, the AI model pinpointed the XFS flaw and generated a working PoC, later verified by Qualys engineers. This follows a 2026 trend of high-impact Linux privilege-escalation bugs, including: - CVE-2026-46333 (nine-year-old ptrace flaw). - CrackArmor (AppArmor-based root-access chain, affecting 12M+ systems). - DirtyClone, DirtyFrag, and Copy Fail (page-cache corruption bugs). ### Vendor Response & Patching Fixed kernels are already available for RHEL, Oracle Linux, AlmaLinux, Rocky Linux, and Fedora, with backports in progress. Organizations are advised to apply updates and reboot affected systems, particularly internet-facing and multi-tenant environments, as no interim mitigation exists.