- CVE-2024-1086, a Linux kernel flaw, is now exploited in active ransomware campaigns
- The bug enables local privilege escalation and affects major distros like Ubuntu and Red Hat
- CISA urges patching or mitigation, warning of significant risk to federal and enterprise systems
The US government is warning that a Linux flaw introduced more than a decade ago - and fixed more than a year ago - is being actively used in ransomware attacks.
