CVE-2026-64357 xfs: fix exchmaps reservation limit check

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfsexchmapsestimateoverhead adds the bmbt and rmapbt overhead to a local resblks variable, but the final UINTMAX check still tests req-resblks. That is the reservation value from before t...

CVE-2026-64299 tracing: Prevent out-of-bounds read in glob matching

In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent out-of-bounds read in glob matching String event fields are not necessarily NUL-terminated, so the filter predicate functions filterpredstring, filterpredstrloc and filterpredstrrelloc pass the field length to th...

CVE-2026-64256

CVE-2026-64256 affects the Linux kernel XFS quota handling in the dqiterate path. An unsigned 32-bit quota id (q_id) can wrap to zero when it accidentally hits XFS_DQ_ID_MAX, causing the iteration over quotas to restart. The fix casts the value to a 64-bit integer (u64) to prevent wraparound. Pub...

CVE-2026-64256

In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate LOLLM noticed that qid is an unsigned 32-bit variable. If it happens to be set to XFSDQIDMAX due to a filesystem that actually has a dquot for IDMAX, then this addition will truncate ...

CVE-2026-64256 xfs: don't wrap around quota ids in dqiterate

In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate LOLLM noticed that qid is an unsigned 32-bit variable. If it happens to be set to XFSDQIDMAX due to a filesystem that actually has a dquot for IDMAX, then this addition will truncate ...

EUVD-2026-48968

In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate LOLLM noticed that qid is an unsigned 32-bit variable. If it happens to be set to XFSDQIDMAX due to a filesystem that actually has a dquot for IDMAX, then this addition will truncate ...

CVE-2026-64256 xfs: don't wrap around quota ids in dqiterate

In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate LOLLM noticed that qid is an unsigned 32-bit variable. If it happens to be set to XFSDQIDMAX due to a filesystem that actually has a dquot for IDMAX, then this addition will truncate ...

Linux Distros Unpatched Vulnerability : CVE-2026-64256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't wrap around quota ids in dqiterate LOLLM noticed that qid is an unsigned 32-bit variable. If it happens to be set to XFSDQIDMAX due to a filesystem...

Linux Distros Unpatched Vulnerability : CVE-2026-64357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix exchmaps reservation limit check xfsexchmapsestimateoverhead adds the bmbt and rmapbt overhead to a local resblks variable, but the final UINTMAX check...

Linux Distros Unpatched Vulnerability : CVE-2026-64600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: resample the data fork mapping after cycling ILOCK xfsreflinkfillcowhole,delalloc are both presented with an inode, a data fork mapping, and a cow fork...

PT-2026-64578

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs exchmaps estimate overhead function incorrectly performs a UINT MAX check. The function adds bmbt and rmapbt overhead to a local...

PT-2026-64577

In the Linux kernel, the following vulnerability has been resolved: xfs: fix memory leak in xfs dqinode metadir create If xfs metadir create fails in xfs dqinode metadir create, the current code returns directly, leaking the allocated update and transaction state. If the subsequent commit fails,...

PT-2026-64477

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the q id variable is defined as an unsigned 32-bit integer. If q id is set to XFS DQ ID MAX because the filesystem contains a dquot for that...

PT-2026-64520

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read occurs during glob matching in the tracing system. This happens because regex match glob calls glob match, which scans strings until a NUL byte is encountered,...

Linux Distros Unpatched Vulnerability : CVE-2026-64299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Prevent out-of-bounds read in glob matching String event fields are not necessarily NUL- terminated, so the filter predicate functions filterpredstring...

The vulnerabilities of the functions xfs_reflink_fill_cow_hole() and xfs_reflink_fill_delalloc() in the fs/xfs/xfs_reflink.c module of the Linux operating system’s file system XFS allow a attacker to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions xfsreflinkfillcowhole and xfsreflinkfilldelalloc in the fs/xfs/xfsreflink.c module of the Linux operating system’s file system are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to compromise...

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

RefluXFS, a Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and...

CVE-2026-64600

In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfsreflinkfillcowhole,delalloc are both presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, these two helpers cycle the ILOCK to grab a...

UBUNTU-CVE-2026-64600

In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfsreflinkfillcowhole,delalloc are both presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, these two helpers cycle the ILOCK to grab a...

CVE-2026-64600

The CVE-2026-64600 issue affects the Linux kernel’s XFS implementation. The race arises when xfs_reflink_fill_{cow_hole,delalloc} cycle the ILOCK to obtain a transaction, leaving data fork and cow fork mappings stale after reacquiring the ILOCK. Specifically, the data fork mapping was not refresh...