CISA: HIGH-SEVERITY LINUX FLAW NOW EXPLOITED BY RANSOMWARE GANGS

Summary from the TLDR InfoSec newsletter

CISA has added a 2024 use-after-free vulnerability to the known exploited vulnerabilities (KEV) list after it was observed being exploited by ransomware gangs. The vulnerability results from a decade-old flaw in the netfilter:nf_tables kernel component and can be abused by local attackers to escalate privileges to root.