Tag

Xfs

All articles tagged with #xfs

security3 hours ago•4 min saved

Linux XFS reflink flaw could grant root via race condition

Qualys warns of RefluXFS, a nine-year-old race-condition in the XFS reflink feature (CVE-2026-64600) that enables local unprivileged users to overwrite blocks backing protected files and gain root on Linux kernels 4.11+. The attack clones a target file to a scratch file and races concurrent writes in the copy-on-write path, causing disk-block modifications that survive reboot and produce no kernel logs. Affected distros include RHEL, Oracle Linux, Amazon Linux, Fedora, CentOS Stream, Rocky Linux, AlmaLinux, and CloudLinux, potentially impacting millions. Kernel patches are available and backported; reboot to verify. There are currently no reliable mitigations beyond patching.

via BleepingComputer|

#cve-2026-64600 #linux-kernel #privilege-escalation

security1 day ago•5 min saved

XFS reflink race lets unprivileged users seize root on default Linux installs

Qualys disclosed CVE-2026-64600, a race in XFS reflink that lets an unprivileged local user overwrite root-owned files and gain persistent root on default installations of RHEL, Fedora Server, Amazon Linux and other reflink-enabled XFS systems. The exploit requires Linux 4.11+ with reflink=1 and an attacker-writable directory on the same XFS volume as a protected file; it operates at the block layer and can survive reboots. Vendors have issued backported kernel fixes and recommend updating and rebooting; there are no practical mitigations otherwise. Check your XFS configurations (reflink status) and apply the appropriate RHSA advisories for your distro to verify patched kernels are running.

via The Hacker News|

#cve-2026-64600 #privilege-escalation #reflink

technology3 months ago•3 min saved

Linux 7.0 Debuts Self-Healing XFS and Broad Hardware Enablement

Linux 7.0 launches with broad hardware enablement (Intel Nova Lake, Crescent Island, AMD graphics), self-healing XFS, and performance optimizations, with Intel TSX defaults to auto mode and standardized I/O error reporting; patches address last‑minute AMD Zen 3 and X.509 issues, and it will power Ubuntu 26.04 LTS as 7.1 development continues.

via Phoronix|

#hardware-support #kernel #linux

technology3 years ago•1 min saved

One missing patch causes XFS metadata corruption on Linux 6.3.

XFS metadata corruption on Linux 6.3 point releases has been traced back to one missing patch that is a one line of code being deleted. The patch has been tested and found to fix the issue even for those not using XFS stripes. Linux 6.3 builds with this patch included are on their way to the Fedora 37 and 38 testing repositories and should also work its way into a new upstream Linux 6.3 point release in the coming days.

via Phoronix|

#kernel-developers #linux #metadata-corruption