7.8
Élevée
Exploitée
· rançongiciel
CVE-2024-1086 Linux Kernel Use-After-Free Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Campagnes de rançongiciel
Utilisation connue
Faiblesse
CWE-416
Description
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| kernel 3.15 | 3.15 → < 6.8 | 6.8 |
| linux_kernel 3.15 | 3.15 → < 6.8 | 6.8 |
Références
- git.kernel.org git.kernel.org
- kernel.dance kernel.dance
- lists.fedoraproject.org lists.fedoraproject.org
- github.com github.com
- news.ycombinator.com news.ycombinator.com
- pwning.tech pwning.tech
- www.openwall.com www.openwall.com
- www.openwall.com www.openwall.com
- www.openwall.com www.openwall.com
- www.openwall.com www.openwall.com
- www.openwall.com www.openwall.com
- security.netapp.com security.netapp.com
- lists.debian.org lists.debian.org
- lists.debian.org lists.debian.org
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de kernel
Les 97 CVE de kernel →
CVE-2021-47482
In the Linux kernel, the following vulnerability has been resolved: net: batman-adv: fix error handling Syzbot…
5.3
Moyenne
CVE-2024-25743
In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and…
7.1
Élevée
CVE-2021-34981
Linux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability
7.5
Élevée
CVE-2023-52584
In the Linux kernel, the following vulnerability has been resolved: spmi: mediatek: Fix UAF on device remove The pmif…
3.8
Faible