CISA has issued an urgent alert about a critical use-after-free vulnerability in the Linux kernel, tracked as CVE-2024-1086. This vulnerability, hidden within the netfilter: nf_tables component, allows local attackers to escalate their privileges and potentially deploy ransomware, which could severely disrupt enterprise systems worldwide.

This vulnerability, hidden within the netfilter: nf_tables component, allows local attackers to escalate their privileges and potentially deploy ransomware, which could severely disrupt enterprise systems worldwide.

  • Treczoks@lemmy.worldEnglish
    25·
    1 day ago

    For exploiting a privilege escalation the attacker must be able to run their own code on your machine. If you let them do such things, you already have more than enough security problems in the first place.

    • okamiueru@lemmy.worldEnglish
      10·
      1 day ago

      Except for supply chain attacks. You get a foot in the door, and open the rest with impunity

      • Treczoks@lemmy.worldEnglish
        2·
        4 hours ago

        Yes, but still a privilege elevation bug is still less risky than a remote execution one.

        • JackbyDev@programming.devEnglish
          2·
          4 hours ago

          They’re replying to the victim blaming mentality of “if you let them then you have bigger problems” in your comment. Not your point about it being less dangerous than remote execution.