204
CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware (cybersecuritynews.com)
submitted 1 year ago by to c/linux@lemmy.world
93 comments fedilink hide all child comments
 

This vulnerability, hidden within the netfilter: nf_tables component, allows local attackers to escalate their privileges and potentially deploy ransomware, which could severely disrupt enterprise systems worldwide.

you are viewing a single comment's thread
view the rest of the comments
[–] 90 points 1 year ago (12 children)

This only affects positively ancient kernels:

From (including) 3.15 Up to (excluding) 5.15.149 From (including) 6.1 Up to (excluding) 6.1.76 From (including) 6.2 Up to (excluding) 6.6.15 From (including) 6.7 Up to (excluding) 6.7.3

  • permalink
  • fedilink
  • source
  • hideshow 12 child comments
    •
  • [–] 16 points 1 year ago (5 children)

    If I’m not mistaken, RHEL9 and equivalents are on 5.15. That’s a pretty big blast radius.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 4 points 1 year ago (2 children)

    Debian Bookworm (Debian 12/oldstable) would be affected then, I think?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •