KEVIntel
Back to KEVs
7.8
CVSS
High

CVE-2024-1086

PUBLISHED

Use-after-free in Linux kernel's netfilter: nf_tables component

Exploited in the wild Used in malware PoC available Low complexity No user interaction
Vendor
Linux
Product
Kernel
Published
Jan 31, 2024
EPSS
—

Description

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.

linux cisa malware nessus_scanner

CVSS scores

CVSS v3.1 7.8 High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitation status

Exploited in the wild

Recorded 2024-05-30 00:00:00 UTC · Source

Used in malware

Recorded 2026-06-02 14:08:23 UTC · Source

Proof of concept available

Recorded 2024-03-20 21:16:41 UTC · Source

SSVC decision points

Exploitation
active
Automatable
No
Technical impact
total

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source Added
CISA May 30, 2024

Scanner integrations

Scanner Reference Detected
Nessus https://www.tenable.com/plugins/nessus/236061 Jun 02, 2025

Potential proof of concepts

These PoCs are unverified and could contain malware. Use at your own risk.

LLfam/CVE-2024-1086

github · Created 2024-12-16 17:33:13 UTC · 14 stars

Alicey0719/docker-POC_CVE-2024-1086

github · Created 2024-04-03 13:09:22 UTC · 2 stars

Notselwyn/CVE-2024-1086

github · Created 2024-03-20 21:16:41 UTC · 2358 stars

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Proof of Concept Exploit Available

  • Added to KEVIntel

  • Detected by Nessus

  • Exploit Used in Malware