CVEvulnerability

CVE-2024-1086

7.8 HIGH Known exploited Published 2024-01-31 Modified 2026-08-07 Official page ↗

CISA Known Exploited Vulnerability

Linux Kernel Use-After-Free Vulnerability — Linux Kernel

Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.

Added to KEV: 2024-05-30
Remediation due: 2024-06-20
Ransomware use: Known
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660; https://nvd.nist.gov/vuln/detail/CVE-2024-1086

Status: Analyzed
Published: 2024-01-31
Last modified: 2026-08-07
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-416

Description

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.

Affected configurations

• netapp h300s firmware • netapp h500s firmware • netapp h700s firmware • netapp h410s firmware • netapp h410c firmware • netapp bootstrap os • linux linux kernel (>= 3.15 < 5.15.149) • linux linux kernel (>= 6.1 < 6.1.76) • linux linux kernel (>= 6.2 < 6.6.15) • linux linux kernel (>= 6.7 < 6.7.3) • linux linux kernel 6.8 • fedoraproject fedora 39 • redhat enterprise linux desktop 7.0 • redhat enterprise linux for ibm z systems 7.0 s390x • redhat enterprise linux for power big endian 7.0 ppc64 • redhat enterprise linux for power little endian 7.0 ppc64le • redhat enterprise linux server 7.0 • redhat enterprise linux workstation 7.0 • debian debian linux 10.0 • netapp a250 firmware • netapp 500f firmware • netapp c250 firmware

Weakness · CWE (1)

CWE-416 Use After Free weakness

References