EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·Jul 22·5 min read
RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)
TL;DR
Qualys identified CVE-2026-64600, a critical race condition in the Linux kernel's XFS filesystem, allowing local users to escalate privileges to root. This vulnerability affects major Linux distributions with reflink enabled, posing significant security risks.
✦ Why It Matters
Review and patch systems using XFS with reflink enabled to mitigate this vulnerability immediately.
Key Takeaways
- Identify if your system runs Linux kernel v4.11 or later.
- Check if your filesystem uses XFS with reflink enabled.
- Apply the latest security patches from your distribution.
- Reboot your system to ensure the patch is effective.
How It Works
RefluXFS exploits a race condition in the XFS filesystem's copy-on-write mechanism. When two concurrent writes target the same file, the kernel drops its inode lock, allowing a second write to complete.
This can lead to the first write incorrectly assuming it can modify the original file, resulting in unauthorized changes that persist across reboots.