# Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

> **Newsylist Open Intelligence Dossier** · First detected: 2026-07-23 20:29 UTC · Category: Technology · Sources: 5 · Current Velocity: 2.8

## Executive Summary
A long-standing security vulnerability in the Linux XFS file system, identified as RefluXFS, allows local users to escalate privileges to root access.

## Intelligence Brief
A race condition, present for nine years within the Linux kernel’s XFS file system, has been disclosed as a local privilege escalation vulnerability. Identified as CVE-2026-64600, the flaw enables local users to obtain root access on default installations of Red Hat Enterprise Linux (RHEL).


Coverage from SecurityBrief Australia, Tech Times, Network World, Qualys, and The Hacker News emphasizes the duration of the flaw and the specific risk to RHEL environments. Reports state the vulnerability impacts 16 million RHEL systems.


Observers are tracking updates regarding remediation for the RefluXFS vulnerability. Coverage does not yet specify the timeline for kernel patches or the release of security advisories by affected vendors.

## Verified Facts & Key Claims
### What is the nature of the RefluXFS flaw?
It is a race condition within the Linux kernel's XFS file system that allows local users to gain root access.

### Which systems are identified as being at risk?
Default installations of Red Hat Enterprise Linux (RHEL) are cited as being susceptible to the flaw.

### How long has this vulnerability existed?
According to reports, the flaw has been present in the Linux kernel for nine years.

## Key People, Organizations & Locations
Linux, Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root, Default RHEL Installs, Linux Kernel Flaw Exposes, Million RHEL Systems, Silent Root Takeover, Linux XFS, RefluXFS A Linux Kernel Local Privilege Escalation

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| SecurityBrief Australia | Linux kernel flaw lets local users gain root access | 2026-07-23 08:04 | [Source Link](https://news.google.com/rss/articles/CBMijwFBVV95cUxQMTVINlB2R3F4cVBMSnQ5cDZibTlwaTZXdEs3TjBfSmJtaVE5SGZVTEs1WWJNWVRiUnBqcEVUYzhTZjJpb1ZXbGdVcXNIaGlpRVFtbUlNZTlCU3NhVTc2UVZEWnZGZUJ5MzdmUE4wZDBRYzY0TnFmZnlNQm5RalhCVC12QUlsaDg2RkM0QnF5RQ?oc=5) |
| Tech Times | Linux Kernel Flaw Exposes 16 Million RHEL Systems to Silent Root Takeover | 2026-07-23 08:04 | [Source Link](https://news.google.com/rss/articles/CBMiwwFBVV95cUxQekJSQXA1aTZwOTN4aXFyU0hUcXhGczRlcV9PTjJaT2FwblQxbmJJaHNhOWF5eExXLW9OLXhKVFVzUWpYUngzLVNVN2xKT2RzRlo0MWdIVUlnaEpISEJHb3JPb25vcjlYTDF3XzRXWWtZWDVBX3BtMDZmZmxtajZvVFB1Nm52MlVIaHl2cTZZLXBxSGdlN2JtTVNXdWhlVTVCVkI1cndKYlg5RXhNcTA1LXdtNU0wcFJSb2hWUk9NbG1qUzg?oc=5) |
| Network World | Linux XFS has a decade-old race condition allowing full root access | 2026-07-23 08:04 | [Source Link](https://news.google.com/rss/articles/CBMiuAFBVV95cUxQOTlQX1Ntd1JZRkxnTzM0cmxkRXRRa3UwMXl3bm42Y2R1empJbjRLSjNFWG5QOF9md0pqdEI3U1RhVWl2eDBwMFI4OUV0a1BHQkNNalRFTTAtUkhReXc1RXhMTE40Sjk3ZndaeGdkVWFuTXFrS25HT2NoZk1FOGV4eGRnRUQyRDN4M3F4N3J5Si1DRXQzTW1MY0Q3UHU4b3JwYklKcWJQWW9heGNxejdtZ1JNOHJTa0tk?oc=5) |
| Qualys | RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600) | 2026-07-23 08:04 | [Source Link](https://news.google.com/rss/articles/CBMi4AFBVV95cUxPQjlBRk9XRDVuaUFrdEZRUFp2ZTJkR3VzZ2dxdlI3a1lQWlVMM3dCQWlRZU1SVmhEQ1NRVkU0bkhEUWFFQnotdFF6N2Iybkk5RnVNTUg0QnpqV096MU5JUnJfWG5wWjl1WnB2X2RCQzJGTzVTa1dmUVpKMEdYM1ZyVW9QQmhiN0VKdnduVjF2YTFRNURJdlVHQU5MTnk5YnQ4UFUzVk1WU2wwV19wZjBaa2xZN0g0WmllZmRJZVU4V2Y3OEpQTXdnb1BqbEQ3bllqSlAydlpoMVExZkNrTV95Yg?oc=5) |
| The Hacker News | Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs | 2026-07-23 08:04 | [Source Link](https://news.google.com/rss/articles/CBMihAFBVV95cUxNR1NqY0czZkpRcFZoUVdYc3pubDJaUTBXdjdrS1U2R0xXSTJCbHRlc240U1JIcU91eDhmaWVIQzlBSl9pU1dESGNnclh5dTF0aVlibDJhaVZqR2czVXRSczhLQl9nY0JHT1EzWm4wRjBBeDdERlZaZ3dDWURvdlRzejFQOC0?oc=5) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-07-23/nine-year-old-refluxfs-linux-flaw-gives-local-users-root-on-default-rhel*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*