答案已發布7 小時前Last edited 7 小時前26 來源

RefluXFS漏洞大爆發：Linux Kernel XFS檔案系統Race Condition 容許本地用戶奪取Root權限

RefluXFS（CVE 2026 64600）係Linux Kernel XFS檔案系統嘅Race Condition漏洞，由Qualys Threat Research Unit喺2026年7月22日公開披露[4]。呢個Bug喺Linux Kernel 4.11（2017年2月）引入，之後嘅所有Mainline同Stable Kernel都受影響。

使用 Studio Global AI 搜尋並查核事實瀏覽更多熱門頁面

Conceptual microchip with glowing padlock and warning symbols representing the RefluXFS Linux kernel vulnerability (CVE-2026-64600). — Search & fact-check with cited sources for What is the "RefluXFS" Linux kernel vulnerability (CVE-2026-64600), how does it work, which systeRefluXFS (CVE-2026-64600) is a race condition in the XFS filesystem copy-on-write path affecting over 16.4 million Linux systems.
AI 提示
Create a landscape editorial hero image for this Studio Global article: Search & fact-check with cited sources for What is the "RefluXFS" Linux kernel vulnerability (CVE-2026-64600), how does it work, which syste. Article summary: **RefluXFS (CVE-2026-64600)** is a high-severity local privilege escalation vulnerability in the Linux kernel's XFS filesystem, disclosed by **Qualys Threat Research Unit** on July 22, 2026 [4]. It allows an unprivileged. Topic tags: general, general web, user generated, government, documentation. Style: premium digital editorial illustration, source-backed research mood, clean composition, high detail, modern web publication hero. Use reference image context only for broad subject, composition, and topical grounding; do not copy the exact image. Avoid: logos, brand marks, copyrighted characters, real person likenesses, fake screenshots, UI text, readable text,
openai.com

RefluXFS（CVE-2026-64600） 係一個影響Linux Kernel XFS檔案系統嘅高風險本地權限提升漏洞。由 Qualys Threat Research Unit 喺2026年7月22日公開披露，呢個漏洞容許無特權嘅本地用戶利用XFS Copy-on-Write（CoW）路徑嘅Race Condition奪取Root權限。全球估計有超過 1,640萬部系統 受影響，而利用呢個漏洞唔需要任何特殊權限或非預設配置。

RefluXFS嘅運作原理

呢個漏洞係一個喺兩個Kernel Helper Function：xfs_reflink_fill_cow_hole 同 xfs_reflink_fill_delalloc 入面嘅 Race Condition。當呢啲Function循環XFS Inode Lock（ILOCK）嚟獲取Transaction嘅時候，Data Fork同CoW Fork嘅Mapping都會變得太舊。雖然CoW Fork Mapping會用嚟更新，但嘅，然後就用返呢個舊Mapping嚟做下一次寫入操作。呢個疏忽令到同時進行嘅寫入可以繞過Copy-on-Write程序，直接修改攻擊者本應無權寫入嘅共享Data Blocks。

Studio Global AI

Search, cite, and publish your own answer

Use this topic as a starting point for a fresh source-backed answer, then compare citations before you share it.

使用 Studio Global AI 搜尋並查核事實

人們還問