CISA: High-severity Linux flaw now exploited by ransomware gangs

A high-severity Linux kernel use-after-free vulnerability (CVE-2024-1086) in netfilter:nf_tables — introduced in 2014 and fixed in January 2024 — enables local privilege escalation to root. Public PoC exploit code was published and CISA confirmed the flaw is being leveraged in ransomware campaigns, added it to the Known Exploited Vulnerabilities catalog, and issued mitigation/patching guidance for affected distributions and kernel versions.