Federal agency warns critical Linux vulnerability being actively exploited
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-1086 | Use-After-Free Local Privilege Escalation in Linux Kernel nf_tables | 7.8 | 28% | KEVRansomwarePoC ×4 | KEV |
From the original article
1 min read at arstechnica.com
The US Cybersecurity and Infrastructure Security Agency has added a critical security bug in Linux to its list of vulnerabilities known to be actively exploited in the wild. The vulnerability, tracked as CVE-2024-1086 and carrying a severity rating of 7. 8 out of a possible 10, allows people who have already gained a foothold inside an affected system to escalate their system privileges.
arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.