ZeroDay Findings
Sign inSign up

Findings

CVE-2024-1086

Linux Kernel Use-After-Free Vulnerability

Published Jan 31, 2024 · updated Aug 7, 2026 · netapp h300s firmware

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 31, 2024 · Catalog

    Detected

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading

  2. May 30, 2024 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  3. Jun 20, 2024 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  4. Aug 7, 2026 · Catalog

    Updated

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date Jun 20, 2024

Affected

  • cpe debian/debian linux10.0
  • cpe fedoraproject/fedora39
  • cpe linux/linux kernelversion unspecified
  • cpe netapp/a250 firmwareversion unspecified
  • cpe netapp/bootstrap osversion unspecified
  • cpe netapp/h300s firmwareversion unspecified
  • cpe netapp/h410c firmwareversion unspecified
  • cpe netapp/h410s firmwareversion unspecified
  • cpe netapp/h500s firmwareversion unspecified
  • cpe netapp/h700s firmwareversion unspecified
  • cpe redhat/enterprise linux desktop7.0
  • vendor Linux Kernelversion unspecified

Sources

  • CISA KEVCVE-2024-1086

    Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.

    cisa.gov
  • CVE.orgCVE-2024-1086

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2024-1086

    30-day exploitation probability 28.1%

    first.org
  • NIST NVDCVE-2024-1086

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can c

    nvd.nist.gov

References

CVE-2024-1086 · ZeroDay Findings