CVE-2024-1086: Linux Kernel Use-After-Free Vulnerability

High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2024-05-30. EPSS: 28.1% chance of exploitation in the next 30 days.

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.

Affected products

• Debian Debian Linux: version 10.0 only
• Fedoraproject Fedora: version 39 only
• Linux Linux Kernel: from 3.15, before 5.15.149 (fixed in 5.15.149); from 6.1, before 6.1.76 (fixed in 6.1.76); from 6.2, before 6.6.15 (fixed in 6.6.15); from 6.7, before 6.7.3 (fixed in 6.7.3); version 6.8 only
• Netapp 500f Firmware: affected versions not specified
• Netapp a250 Firmware: affected versions not specified
• Netapp Bootstrap OS: affected versions not specified
• Netapp c250 Firmware: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Red Hat Enterprise Linux Desktop: version 7.0 only
• Red Hat Enterprise Linux For IBM Z Systems: version 7.0_s390x only
• Red Hat Enterprise Linux For Power Big Endian: version 7.0_ppc64 only
• Red Hat Enterprise Linux For Power Little Endian: version 7.0_ppc64le only
• Red Hat Enterprise Linux Server: version 7.0 only
• Red Hat Enterprise Linux Workstation: version 7.0 only

Published 2024-01-31. Last modified 2026-08-07.