CVE-2024-1086
Use-after-free in Linux kernel's netfilter: nf_tables component
KEV RANSOMWAREHIGH 7.8EPSS 28.1%
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
- Affected
- Linux · Kernel
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 28.06% chance of exploitation in the next 30 days, 98th percentile
- CISA KEV
- added 2024-05-30, used in ransomware campaigns
- Published
- 2024-01-31
- Updated
- 2026-08-07
Proof-of-concept exploits (16)
- Notselwyn/CVE-2024-10862459★ · 2024-04-17
- https://pwning.tech/nftables/
- 0pts/0pts-bitpixie3★ · 2025-06-29
- Alicey0719/docker-POC_CVE-2024-10863★ · 2024-05-19
- CCIEVoice2009/CVE-2024-10860★ · 2024-04-30
- LLfam/CVE-2024-108622★ · 2024-12-16
- andigandhi/bitpixie156★ · 2025-09-21
- feely666/CVE-2024-10860★ · 2024-06-10
- jmfgd/cve_details0★ · 2026-02-07
- karim4353/CVE-2024-1086-Exploit0★ · 2025-09-04
- lobo360/iptables-ubuntu0★ · 2024-09-03
- xzx482/CVE-2024-10860★ · 2024-07-04
- b1nhack/CVE-2024-10860★ · 2026-06-01
- vettrivel007/CVE-2024-10860★ · 2026-05-05
- NGChuen/linux-kernel-bugs0★ · 2026-08-31
- eavil666/cve-poc-mapper0★ · 2026-10-14
Exploit collections (1)
- linux/kernelctf/CVE-2024-1086_lts_mitigationgoogle/security-research
Security advisories
- https://pwning.tech/nftables
- https://security.netapp.com/advisory/ntap-20240614-0009
- http://www.openwall.com/lists/oss-security/2024/04/10/22
- http://www.openwall.com/lists/oss-security/2024/04/10/23
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f3…
- https://kernel.dance/f342de4e2f33e0e39165d8639387aa6c19dff660
- https://news.ycombinator.com/item?id=39828424