A newly disclosed CVE-2026-64600, dubbed “RefluXFS,” a critical race condition in the Linux kernel’s XFS filesystem that allows unprivileged local users to escalate to full root privileges. The flaw affects any Linux distribution shipping an XFS root filesystem with reflink enabled, including default installations of RHEL, Oracle Linux, Amazon...