NINE-YEAR-OLD LINUX XFS FLAW ENABLES ROOT ACCESS

The vulnerability exists in how XFS handles file operations, creating a window where attackers can manipulate protected system files during concurrent access attempts. By exploiting this race condition, an attacker with local access can escalate privileges to root level, gaining complete system control. The flaw affects multiple Linux distributions using XFS as the default or optional filesystem. XFS is commonly deployed in enterprise environments and data center deployments due to its performance characteristics with large files and storage systems. Kernel developers have released patches addressing CVE-2026-64600. System administrators should prioritize updating affected systems, particularly those exposed to untrusted local users. The vulnerability requires local access to exploit, limiting risk for systems with restricted user access policies. This discovery highlights the importance of ongoing security audits in kernel filesystems, even for components considered mature and stable.