THREAT OPS › Threat News › Re: RefluXFS: LPE in the Linux kernel via XFS reflink race (CVE-2026-64600)
Re: RefluXFS: LPE in the Linux kernel via XFS reflink race (CVE-2026-64600)
<p>Posted by Darrick J. Wong on Aug 03</p>I don't. I imagine that it's still exploitable if (a) your nfs server<br /> itself does directio and (b) your nfs client can send directio writes to<br /> the server, but given the extra rpc work involved I'm not surprised that<br /> it's much harder to reproduce than running it against a raw xfs<br /> filesystem.<br /> <br /> --D<br /
Indicators of compromise
- CVE-2026-64600cve
Original source: https://seclists.org/oss-sec/2026/q3/394