Active Exploitation Observed for Linux Kernel Privilege Escalation Vulnerability (CVE-2024-1086)
Posted: Thu Oct 03, 2024 5:59 am
Last week, CISA added CVE-2024-1086 to its Known Exploited Vulnerability Catalog. CVE-2024-1086, a use-after-free vulnerability in the Linux kernel’s netfilter, was disclosed on January 31, 2024 and assigned a CVSS of 7.8 (High). If successfully exploited, it could allow threat actors to achieve local privilege escalation.
https://www.crowdstrike.com/en-us/blog/ ... erability/
https://www.crowdstrike.com/en-us/blog/ ... erability/