CVE-2024-1086

HIGHCVSS 7.8Known Exploited

CISA Known Exploited Vulnerability

This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660; https://nvd.nist.gov/vuln/detail/CVE-2024-1086

Remediation deadline: June 20, 2024

Ransomware use: Known

Description

Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.

Timeline

Published:January 31st, 2024 1:15 PM

Last modified:August 7th, 2026 7:59 PM

Added to KEV:May 30th, 2024

CVSS Scoring

CVSS v3: 7.8 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Software

From NVD CPE configuration data

Vendors

netapplinuxfedoraprojectredhatdebian

Products

h300s_firmwareh500s_firmwareh700s_firmwareh410s_firmwareh410c_firmwarebootstrap_oslinux_kernelfedoraenterprise_linux_desktopenterprise_linux_for_ibm_z_systemsenterprise_linux_for_power_big_endianenterprise_linux_for_power_little_endianenterprise_linux_serverenterprise_linux_workstationdebian_linuxa250_firmware500f_firmwarec250_firmware