CISA Urges Immediate Patching of Critical Linux Kernel Vulnerability
The US Cybersecurity and Infrastructure Security Agency (CISA) has warned about an actively exploited critical Linux vulnerability, CVE-2024-1086, which allows privilege escalation through a use-after-free error in the NF_tables component. Affecting Linux kernel versions 5.14 to 6.6, the flaw was patched in January, but many systems remain unpatched. CISA urges immediate updates, with federal agencies required to patch by June 20.