Linux

Linux has a medium-severity vulnerability (CVSS 6.5) that requires local access and low-level user privileges to exploit, but can compromise the confidentiality of system data across security boundaries. The vulnerability poses no risk to system availability or integrity, only to information disclosure. Security teams should monitor for any suspicious local user activity and prepare patch management procedures ahead of the vendor deadline on August 29, 2024.