CVE-2024-1086 vulnerability in Linux and Other Products
Published on January 31, 2024

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.

NVD

Known Exploited Vulnerability

This Linux Kernel Use-After-Free Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.

The following remediation steps are recommended / required by June 20, 2024: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Vulnerability Analysis

CVE-2024-1086 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.

What is a Dangling pointer Vulnerability?

Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

CVE-2024-1086 has been classified to as a Dangling pointer vulnerability or weakness.

Products Associated with CVE-2024-1086

You can be notified by stack.watch whenever vulnerabilities like CVE-2024-1086 are published in these products:

Linux Kernel

Canonical Ubuntu Linux

Fedora Project Fedora

Red Hat Enterprise Linux Desktop

Red Hat Enterprise Linux Workstation

Red Hat Enterprise Linux Server

Red Hat Enterprise Linux Power Little Endian

Red Hat Enterprise Linux Power Big Endian

Red Hat Enterprise Linux Ibm Z Systems

Debian Linux

What versions are vulnerable to CVE-2024-1086?

Linux Kernel Version 6.7 Fixed in Version 6.7.3
Linux Kernel Version 6.2 Fixed in Version 6.6.15
Linux Kernel Version 6.8 rc1
Linux Kernel Version 6.1 Fixed in Version 6.1.76
Linux Kernel Version 3.15 Fixed in Version 5.15.149

Fedora Project Fedora Version 39

Red Hat Enterprise Linux Desktop Version 7.0
Red Hat Enterprise Linux Workstation Version 7.0
Red Hat Enterprise Linux Server Version 7.0
Red Hat Enterprise Linux Power Little Endian Version 7.0_ppc64le
Red Hat Enterprise Linux Power Big Endian Version 7.0_ppc64
Red Hat Enterprise Linux Ibm Z Systems Version 7.0_s390x

Debian Linux Version 10.0