CISA confirmed that a serious vulnerability in the Linux kernel, CVE-2024-1086, is being actively exploited in ransomware attacks. This flaw allows local attackers to escalate their privileges, potentially gaining root access and compromising entire systems. Federal agencies must secure their systems by June 20, 2024, or implement specific mitigations.