207
CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware (cybersecuritynews.com)
submitted 11 months ago by to c/linux@lemmy.world
93 comments fedilink hide all child comments
 

This vulnerability, hidden within the netfilter: nf_tables component, allows local attackers to escalate their privileges and potentially deploy ransomware, which could severely disrupt enterprise systems worldwide.

you are viewing a single comment's thread
view the rest of the comments
[–] 8 points 11 months ago (2 children)

Yes, that's right. You cannot have a UAF situation unless you're using unsafe "escape hatch" tools.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -1 points 11 months ago (1 child)

    Again... IMPROBABLE

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 11 months ago

    I've only seen it once. And it was made specifically to trigger a compiler bug. It barely looked like rust code.

    Now tell me how someone will introduce such a bug by accident. Winning the lottery 10000 times in a row with the same number isn't impossible either. But we are engineers, not pure math pedantics. 0.000000000000001% probability for something that happens with less frequency than once per second is impossible.

  • permalink
  • fedilink
  • source
  • parent