CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2024-1086
High (7.8) in Linux Kernel. In CISA KEV since 2024-05-30, with known ransomware use. EPSS 28% chance of exploitation in the next 30 days.
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.
We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
Severity
- EPSS
- 28% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2024-05-30, due 2024-06-20, known ransomware use
- CWE
- CWE-416
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- fedoraproject:fedora
- linux:linux_kernel
- netapp:500f_firmware
- netapp:a250_firmware
- netapp:bootstrap_os
- netapp:c250_firmware
- netapp:h300s_firmware
- netapp:h410c_firmware
- netapp:h410s_firmware
- netapp:h500s_firmware
- netapp:h700s_firmware
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_for_ibm_z_systems
- redhat:enterprise_linux_for_power_big_endian
- redhat:enterprise_linux_for_power_little_endian
- redhat:enterprise_linux_server
- redhat:enterprise_linux_workstation