🟠 High | Source: Microsoft Security Response Center
CVE-2026-64600 is a vulnerability in the Linux XFS filesystem driver, specifically related to incorrect handling of data fork mappings after cycling the inode lock (ILOCK). This type of kernel-level bug can lead to memory corruption or data inconsistency, potentially enabling privilege escalation or denial of service on affected systems. Azure workloads running Linux virtual machines with XFS filesystems may be exposed if underlying host or guest kernels are unpatched.
Security Architect’s Take: Identify Azure VMs and container hosts running Linux with XFS as the filesystem and ensure the host and guest kernels are patched promptly. Prioritise workloads where tenants or users have local code execution access, as kernel filesystem bugs are commonly leveraged for privilege escalation.
Original advisory: CVE-2026-64600 xfs: resample the data fork mapping after cycling ILOCK