Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and Amazon Linux can meet the conditions for exploitation. The company demonstrated the race

The article reports on RefluXFS (CVE-2026-64600), a Linux kernel XFS race-condition vulnerability that allows an unprivileged local user to overwrite root-owned files on reflink-enabled XFS filesystems and gain persistent root access, impacting default installs of RHEL, its derivatives, Fedora Server, and Amazon Linux.[1][3][4] It is a local privilege escalation flaw present in Linux kernels 4.11 and later, with no effective configuration-based mitigations; patching the kernel and rebooting are currently the only reliable defenses.[1][2][4] From a RealGround perspective, any AI workloads or agents running on these affected Linux distributions—especially in multi-tenant or shared compute environments—inherit this risk, making host compromise a potential path to tampering with AI models, training data, or agent business logic. Organizations should treat this as an AI supply chain and infrastructure exposure: systematically inventory AI systems for reflink-enabled XFS, prioritize kernel patching on AI hosts, include RefluXFS in SBOM/advisory workflows, and use continuous red teaming to validate that compromised local accounts cannot trivially pivot to controlling AI agents or thei