Linux Kernal Vulnerability added to CISA Known Exploited Catalog - 20240531001¶
Overview¶
Linux Kernal have released a security update relating to a vulnerability impacting a common open-source component, third-party library, or a protocol used by different products. A use-after-free bug in the netfilter component that permits a local attacker to elevate privileges from a regular user to root and possibly execute arbitrary code.
What is vulnerable?¶
| CVE | Severity | CVSS |
|---|---|---|
| CVE-2024-1086 | High | 7.8 |
What has been observed?¶
CISA added this vulnerability in their Known Exploited Vulnerabilities catalog. There is no evidence of exploitation affecting Western Australian Government networks at the time of publishing.
Recommendation¶
The WA SOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframe of 48 Hours... (refer Patch Management):
Additional Resources¶
- CVE Details artcle: https://www.cvedetails.com/cve/CVE-2024-1086/
- TheHackerNews article: https://thehackernews.com/2024/05/cisa-alerts-federal-agencies-to-patch.html