CISA has issued an urgent alert about a critical use-after-free vulnerability in the Linux kernel, tracked as CVE-2024-1086. This vulnerability, hidden within the netfilter: nf_tables component, allows local attackers to escalate their privileges and potentially deploy ransomware, which could severely disrupt enterprise systems worldwide.

This vulnerability, hidden within the netfilter: nf_tables component, allows local attackers to escalate their privileges and potentially deploy ransomware, which could severely disrupt enterprise systems worldwide.

  • henfredemars@infosec.pubEnglish
    8·
    5 days ago

    Yes, that’s right. You cannot have a UAF situation unless you’re using unsafe “escape hatch” tools.

      • calcopiritus@lemmy.worldEnglish
        1·
        3 days ago

        I’ve only seen it once. And it was made specifically to trigger a compiler bug. It barely looked like rust code.

        Now tell me how someone will introduce such a bug by accident. Winning the lottery 10000 times in a row with the same number isn’t impossible either. But we are engineers, not pure math pedantics. 0.000000000000001% probability for something that happens with less frequency than once per second is impossible.