CISA has issued an urgent alert about a critical use-after-free vulnerability in the Linux kernel, tracked as CVE-2024-1086. This vulnerability, hidden within the netfilter: nf_tables component, allows local attackers to escalate their privileges and potentially deploy ransomware, which could severely disrupt enterprise systems worldwide.

This vulnerability, hidden within the netfilter: nf_tables component, allows local attackers to escalate their privileges and potentially deploy ransomware, which could severely disrupt enterprise systems worldwide.

    • BCsven@lemmy.caEnglish
      46·
      3 days ago

      If they can place exploit code on my machine, I think its already game over, regardless of that bug

      • CriticalMiss@lemmy.worldEnglish
        8·
        3 days ago

        Not necessarily, if you follow proper hosting etiquette, then even if they break in they should only be a standard user and have no access to the rest of your system. But most self hosters just run everything as root as it’s less of a hassle.

        • BCsven@lemmy.caEnglish
          1·
          2 days ago

          I guess I was thinking of the many Linux users I have encountered that sets same user and root password, or has sudo as passwordless. SMH