CVE-2026-64600

CVE-2026-64600 – RefluXFS 탐지 및 완화 도구 이 저장소는 XFS 파일시스템을 실행하는 Linux 시스템에서 RefluXFS 취약점CVE‑2026‑64600을 탐지 하고, 안전하게 검증 하며, 완화 하는 포괄적인 C 유틸리티를 제공합니다. 이 도구는 취약한 커널을 확인하고, reflink가 활성화된 XFS 마운트를 식별하며, 선택적으로 안전한 레이스 트리거를 시도하고, 필요 시 2계층 완화SystemTap 프로브 + reflink=0 리마운트를 적용합니다. ⚠️ 고지 사항: 이 도구는 승인된 보안 평가 및...

ROS-20260915-73-0148

The vulnerabilities of the functions xfsreflinkfillcowhole and xfsreflinkfilldelalloc in the fs/xfs/xfsreflink.c module of the Linux operating system’s file system are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to compromise...

CVE-2026-80536

CVE-2026-80536 is an out-of-bounds write in the Linux kernel's XFS filesystem , specifically in xlog_recover_do_reg_buffer() during mount-time log recovery. The destination offset and buffer size are both attacker-controlled but only bounded by an ASSERT() that compiles away on production kernels...

CVE-2026-80530

This vulnerability affects the XFS filesystem in the Linux kernel. When exchanging two full-file ranges with the XFS_EXCHMAPS_INO1_WRITTEN flag, xfs_exchmaps_can_skip_mapping() can skip hole and unwritten mappings from file1, causing the post-operation cleanup to clear the reflink flag from an in...

The vulnerability of the xfsaild_push() function in the fs/xfs/xfs_trans_ail.c module of the Xfs file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xfsaildpush function in the fs/xfs/xfstransail.c module of the Xfs file system in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

Linux Distros Unpatched Vulnerability : CVE-2026-74728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: handle NULL baddr in xfsbuffree When xfsbufallocbackingmem fails, xfsbuffree is called with bp-baddr still NULL. The code falls through to the folioput pat...

Linux Distros Unpatched Vulnerability : CVE-2026-64357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfsexchmapsestimateoverhead adds the bmbt and rmap...

RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)

Executive summary Qualys Threat Research Unit TRU identified CVE-2026-64600, a race condition in the Linux kernel’s XFS filesystem copy-on-write path. An attacker with an ordinary local account can exploit this race condition to overwrite protected files on disk and gain host root privileges on...