THREATOPS
THREAT OPSThreat News › Re: RefluXFS: LPE in the Linux kernel via XFS reflink race (CVE-2026-64600)

Re: RefluXFS: LPE in the Linux kernel via XFS reflink race (CVE-2026-64600)

medoss_secPublished 2026-08-03

<p>Posted by Darrick J. Wong on Aug 03</p>I don&apos;t. I imagine that it&apos;s still exploitable if (a) your nfs server<br /> itself does directio and (b) your nfs client can send directio writes to<br /> the server, but given the extra rpc work involved I&apos;m not surprised that<br /> it&apos;s much harder to reproduce than running it against a raw xfs<br /> filesystem.<br /> <br /> --D<br /

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/394