Skip to main content

Linux CVE-2026-64600

| EUVDEUVD-2026-47879 HIGH
Race Condition (CWE-362)
2026-07-22 GHSA-6p99-w6f4-qcvq
Information Disclosure Linux Race Condition
7.8
CVSS 3.1 · Vendor
Share

Severity by source

Vendor (CNA) PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vuln.today AI
7.5 HIGH

Local access and unprivileged account required (AV:L/PR:L); race condition adds complexity (AC:H); scope changes because writes land in root-owned files outside attacker's security domain (S:C); full confidentiality and integrity over any readable file on the volume (C:H/I:H); no availability impact.

3.1 AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
4.0 AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
SUSE
HIGH
qualitative
Red Hat
7.8 HIGH
qualitative

Primary rating from Vendor (CNA).

CVSS VectorVendor

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

7
Analysis Updated
Jul 27, 2026 - 05:27 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Jul 27, 2026 - 05:22 vuln.today
cvss_changed
CVSS changed
Jul 27, 2026 - 05:22 NVD
7.8 (HIGH)
Patch available
Jul 23, 2026 - 07:17 EUVD
Analysis Generated
Jul 22, 2026 - 18:20 vuln.today
CVE Published
Jul 22, 2026 - 16:49 oss-security
HIGH
CVE Published
Jul 22, 2026 - 16:49 oss-security
HIGH 7.8

Description PRE-NVD

Disclosed via oss-security. NVD scoring and full description are pending.

Articles & Coverage 1

medium.com CVE-2026-64600 (RefluXFS): Linux Kernel XFS Race Condition Allows Unprivileged Local Root Aug 02, 2026

AnalysisAI

Information disclosure and potential data corruption in the Linux kernel's XFS filesystem can allow a local attacker with low privileges to achieve high integrity, confidentiality, and availability impact. The vulnerability resides in the reflink copy-on-write logic where stale data fork mappings are used after cycling the ILOCK, leading to inaccurate shared-extent tracking. No active exploitation or public exploit code has been identified at time of analysis, and a vendor patch is available.

Same weakness CWE-362 – Race Condition

View all
CVE-2023-36884 HIGH POC
7.5
CVE-2016-5195 HIGH POC
7.0
CVE-2017-1000112 HIGH POC
7.0
CVE-2014-0196 MEDIUM POC
5.5
CVE-2014-0226 MEDIUM POC
6.8
CVE-2016-1757 HIGH POC
7.0
CVE-2016-8655 HIGH POC
7.8
CVE-2015-5754 CRITICAL POC
9.3

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Important
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 16.0 Affected

Share

CVE-2026-64600 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy