CISA Alerts Federal Agencies to Patch Actively Exploited Linux Kernel Flaw

CISA has added CVE-2024-1086 — a Linux kernel netfilter use-after-free vulnerability (CVSS 7.8) that can enable local privilege escalation to root and potential code execution — to its Known Exploited Vulnerabilities catalog after observing active exploitation. The notice also highlights CVE-2024-24919 (Check Point gateway information exposure, CVSS 7.5) and urges federal agencies to apply available fixes by June 20, 2024 to protect internet-connected gateways and Linux hosts.