CISA has issued a warning concerning two Linux vulnerabilities.

Threat actors are actively exploiting two major Linux vulnerabilities recently added to CISA’s Known Exploited Vulnerabilities catalog. One flaw is an authentication bypass in GNU telnetd that allows attackers to gain root shell access. The second, an older kernel integer overflow bug, enables privilege escalation on systems with specific hardware conditions. CISA is urging organizations to patch these and related vulnerabilities by mid-February due to confirmed exploitation attempts.

Read more:

https://www.securityweek.com/organizations-warned-of-exploited-linux-vulnerabilities/