CVE-2026-64600

CVE-2026-64600 – RefluXFS 检测与缓解工具 本仓库提供了一个全面的 C 语言工具，用于在运行 XFS 文件系统的 Linux 系统上检测 、安全验证 和缓解 RefluXFS 漏洞（CVE‑2026‑64600）。该工具检查易受攻击的内核、识别启用了 reflink 的 XFS 挂载点、可选地尝试安全的竞态触发，并在需要时部署两层缓解措施（SystemTap 探针 + 使用 reflink=0 重新挂载）。 ⚠️ 免责声明： 本工具仅用于授权的安全评估和系统加固 。请仅在您拥有或获得明确测试许可的系统上使用。作者不对滥用行为承担任何责任。 🔥 漏洞概述...

CVE-2026-80536

CVE-2026-80536 is an out-of-bounds write in the Linux kernel's XFS filesystem , specifically in xlog_recover_do_reg_buffer() during mount-time log recovery. The destination offset and buffer size are both attacker-controlled but only bounded by an ASSERT() that compiles away on production kernels...

CVE-2026-80530

This vulnerability affects the XFS filesystem in the Linux kernel. When exchanging two full-file ranges with the XFS_EXCHMAPS_INO1_WRITTEN flag, xfs_exchmaps_can_skip_mapping() can skip hole and unwritten mappings from file1, causing the post-operation cleanup to clear the reflink flag from an in...

Linux Distros Unpatched Vulnerability : CVE-2026-74728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: handle NULL baddr in xfsbuffree When xfsbufallocbackingmem fails, xfsbuffree is called with bp-baddr still NULL. The code falls through to the folioput pat...

Linux Distros Unpatched Vulnerability : CVE-2026-64357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix exchmaps reservation limit check xfsexchmapsestimateoverhead adds the bmbt and rmapbt overhead to a local resblks variable, but the final UINTMAX check...

RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)

Executive summary Qualys Threat Research Unit TRU identified CVE-2026-64600, a race condition in the Linux kernel’s XFS filesystem copy-on-write path. An attacker with an ordinary local account can exploit this race condition to overwrite protected files on disk and gain host root privileges on...