CISA has issued an urgent alert about a critical use-after-free vulnerability in the Linux kernel, tracked as CVE-2024-1086. This vulnerability, hidden within the netfilter: nf_tables component, allows local attackers to escalate their privileges and potentially deploy ransomware, which could severely disrupt enterprise systems worldwide.

This vulnerability, hidden within the netfilter: nf_tables component, allows local attackers to escalate their privileges and potentially deploy ransomware, which could severely disrupt enterprise systems worldwide.

  • BCsven@lemmy.caEnglish
    46·
    3 days ago

    If they can place exploit code on my machine, I think its already game over, regardless of that bug

    • CriticalMiss@lemmy.worldEnglish
      8·
      3 days ago

      Not necessarily, if you follow proper hosting etiquette, then even if they break in they should only be a standard user and have no access to the rest of your system. But most self hosters just run everything as root as it’s less of a hassle.

      • BCsven@lemmy.caEnglish
        1·
        2 days ago

        I guess I was thinking of the many Linux users I have encountered that sets same user and root password, or has sudo as passwordless. SMH