CVE-2026-80530: Linux XFS EXCHANGE_RANGE reflink flag clearing leading to local privilege escalation

<p>Posted by Lin Jiapeng on Sep 03</p>Hi all,<br /> <br /> We are publishing details of XFSTango (CVE-2026-80530), a local<br /> privilege escalation vulnerability in the Linux kernel&apos;s XFS<br /> filesystem, caused by an inconsistent reflink-flag clearing path in<br /> XFS_IOC_EXCHANGE_RANGE.<br /> <br /> Impact:<br /> --------<br /> - An unprivileged local user can, without requiring any ele