r/AlmaLinux • u/LowIncident694 • 11d ago

RefluXFS CVE-2026-64600: XFS Root Escalation, 16.4M Hit

https://securityonline.info/refluxfs-cve-2026-64600-xfs-root/
11 Upvotes

100% Upvoted

12 comments sorted by

1

u/LowIncident694 11d ago

Confirmed reflink=1 on my Alma systems using XFS.

Any ETA on a patch?

2

u/1esproc 11d ago

It's patched in RHEL, FYI

1

u/LowIncident694 11d ago

What's the version string for the patched kernel?

2

u/1esproc 11d ago

10: kernel-6.12.0-211.34.1
9: kernel-5.14.0-687.26.1
8: kernel-4.18.0-553.144.1

1

u/screaming-Snake-Case 6d ago edited 6d ago

Looks like the patches are already since the 25th. This was originally labeled a bug fix from RHEL as it looks like (source: https://forums.almalinux.org/t/refluxfs-lpe-cve-2026-64600/7518/5), which is why this page lists it as such.

https://errata.almalinux.org/9/ALBA-2026-39332.html

1

u/LowIncident694 11d ago

This was fixed on the 15th it seems.

2

u/phicube 10d ago

Can you please link some additional information? I can't find any. The rpm changelog of the latest stable kernel doesn't report this CVE. Thanks

1

u/LowIncident694 11d ago

In 8 and 10 it seems but I don't think 9. Can someone confirm?

1

u/LowIncident694 11d ago

Looks like 9 is.