{"id":555972,"date":"2026-07-23T16:38:09","date_gmt":"2026-07-23T16:38:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/il\/555972\/"},"modified":"2026-07-23T16:38:09","modified_gmt":"2026-07-23T16:38:09","slug":"linux-xfs-has-a-decade-old-race-condition-allowing-full-root-access","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/il\/555972\/","title":{"rendered":"Linux XFS has a decade-old race condition allowing full root access"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Affected Linux distributions include RHEL 8,9 and 10, CentOS Stream 8,9, and 10, Oracle Linux 8,9,10, Rocky and AlmaLinux 8,9, and 10, CloudLinux 8,9, and 10, Amazon Linux 2023 and Amazon Linux 2 AMIs from December 2022 onward, Fedora Server 31+, and Debian, Ubuntu and SUSE installations where XFS was manually selected.<\/p>\n<p class=\"wp-block-paragraph\">Usual kernel hardening practices, including memory protection features like <a href=\"https:\/\/www.csoonline.com\/article\/559839\/self-protection-is-key-to-linux-kernel-security.html\" rel=\"nofollow noopener\" target=\"_blank\">Kernel Address Space Layout Randomization<\/a> (KASLR), Supervisor Mode Access Prevention (SMAP), and Supervisor Mode Execution Prevention (SMEP), are ineffective as they are all aimed at different attack surfaces. Even a kernel lockdown does nothing to stop the affected path, Qualys noted.<\/p>\n<p class=\"wp-block-paragraph\">\u201cSELinux doesn\u2019t block the affected path in testing, and seccomp profiles are no barrier as long as they permit write and ioctl, which ordinary profiles do,\u201d Abbasi explained. Immediate kernel patching and a full reboot are the only reliable mitigations, he added.<\/p>\n","protected":false},"excerpt":{"rendered":"Affected Linux distributions include RHEL 8,9 and 10, CentOS Stream 8,9, and 10, Oracle Linux 8,9,10, Rocky and&hellip;\n","protected":false},"author":2,"featured_media":555973,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[85,46,125],"class_list":["post-555972","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-il","tag-israel","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/555972","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/comments?post=555972"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/555972\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media\/555973"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media?parent=555972"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/categories?post=555972"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/tags?post=555972"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}