Skip to content
fr Sign in
7.8 High Exploited · ransomware

CVE-2024-1086 Linux Kernel Use-After-Free Vulnerability

Active exploitation observed

· CISA KEV catalogue
Required action Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Ransomware campaigns Known to be used
Weakness CWE-416

Description

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.

Affected products and versions

Product Affected versions Fixed in
kernel 3.15 3.15 → < 6.8 6.8
linux_kernel 3.15 3.15 → < 6.8 6.8

References

Timeline

  1. Published
  2. Added to the KEV catalogue
  3. Last modified

Other CVEs of kernel

The 97 CVEs of kernel →
CVE-2021-47482 In the Linux kernel, the following vulnerability has been resolved: net: batman-adv: fix error handling Syzbot… 5.3 Medium CVE-2024-25743 In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and… 7.1 High CVE-2021-34981 Linux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability 7.5 High CVE-2023-52584 In the Linux kernel, the following vulnerability has been resolved: spmi: mediatek: Fix UAF on device remove The pmif… 3.8 Low
Track this CVE