Summary of CISA’s New Vulnerability Addition

CISA has added a new vulnerability to its Known Exploited Vulnerabilities Catalog due to evidence of active exploitation.

Newly Added Vulnerability

• CVE-2024-53104 – Linux Kernel Out-of-Bounds Write Vulnerability

Significance of Vulnerabilities

These vulnerabilities are common attack vectors for cybercriminals and pose serious risks to federal networks.

Binding Operational Directive (BOD) 22-01

The BOD 22-01 mandates that Federal Civilian Executive Branch (FCEB) agencies remediate identified vulnerabilities by specified deadlines to safeguard their networks. For more details, refer to the BOD 22-01 Fact Sheet.

Recommendations for Organizations

While BOD 22-01 is specifically for FCEB agencies, CISA encourages all organizations to prioritize the timely remediation of Catalog vulnerabilities to mitigate cyberattack risks. CISA will continue to update the catalog with vulnerabilities that meet the specified criteria.

For more information, visit the original article here.