Summary
Qualys Threat Research Unit disclosed RefluXFS (CVE-2026-64600), a local privilege escalation vulnerability in the Linux kernel present since version 4.11 (2017) — a nine-year-old race condition in the XFS filesystem copy-on-write (CoW) path. An ordinary local account is sufficient to overwrite protected files like /etc/passwd or SUID-root binaries and achieve host root access. Exploitation is highly reliable, survives reboots, and leaves no kernel log output.
The flaw triggers when two concurrent O_DIRECT writes target the same reflinked file. During a brief window where the kernel drops its inode lock while waiting for transaction log space, a second writer can remap the file and decrement the original block’s reference count — causing the first writer to proceed with a stale block mapping and inadvertently overwrite protected data. Systems running Linux 4.11+ with XFS reflink=1 (default on RHEL, Oracle Linux, Amazon Linux, and Fedora) are vulnerable. Qualys estimates 16.4 million systems potentially affected worldwide.
Notably, the vulnerability was discovered with assistance from Anthropic’s Claude Mythos Preview AI. The upstream kernel fix was merged July 16, 2026. Vendor patches are now available for major enterprise distributions.
Source
Qualys TRU Blog
The Hacker News
Cybersecurity News
Commentary
A nine-year-old race condition that silently overwrites protected files with no kernel log output is a penetration tester’s dream and a defender’s nightmare. The “no log output” detail is critical — existing EDR and kernel audit configurations that rely on log-based detection will miss this entirely. Detection requires behavioral monitoring of privileged file writes, not log parsing.
The AI-assisted discovery angle is also worth noting: Qualys credits Claude Mythos Preview with helping find this. That’s a meaningful signal that AI-augmented vulnerability research is now producing results on real, previously-missed kernel bugs — not just CTF exercises. Patch all XFS-enabled Linux systems immediately; the upstream fix is available and the window for quiet exploitation is closing fast.