CyberShieldAlerts
Hacking News·1 min read

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

RefluXFS, a Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualy

CS
CyberShield Team
2026-07-23
Share:
Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

RefluXFS, a Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and Amazon Linux can meet the conditions for exploitation. The company demonstrated the race against

Tags

#cybersecurity#news
Share:

Join the Discussion

Comments coming soon. Follow us on social media for real-time discussions.

Related Articles

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Hacking News
1 min read

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed to target cPanel and WebHost Manager

CyberShield TeamRead More
Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge
Hacking News
1 min read

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

The Chaos ransomware group ran its command-and-control through the victim's own browser. Cisco Talos on Thursday detailed msaRAT, the Rust implant behind it, found on a compromised Windows machine ahe

CyberShield TeamRead More
Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access
Hacking News
1 min read

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw that has come under a

CyberShield TeamRead More
← Previous

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

Next →

How Synthetic Identity Fraud is Coming for Machine Identities