CVE-2024-1086
KEV RANSOMWAREHIGH 7.8EPSS 28.1%
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
- CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 28.06% chance of exploitation in the next 30 days, 98th percentile
- CISA KEV
- added 2024-05-30, used in ransomware campaigns
- Published
- 2024-01-31
- Updated
- 2026-08-07
Proof-of-concept exploits (16)
- Notselwyn/CVE-2024-10862457★ · 2024-04-17
- https://pwning.tech/nftables/
- 0pts/0pts-bitpixie3★ · 2025-06-29
- Alicey0719/docker-POC_CVE-2024-10863★ · 2024-05-19
- CCIEVoice2009/CVE-2024-10860★ · 2024-04-30
- LLfam/CVE-2024-108621★ · 2024-12-16
- andigandhi/bitpixie155★ · 2025-09-21
- feely666/CVE-2024-10860★ · 2024-06-10
- jmfgd/cve_details0★ · 2026-02-07
- karim4353/CVE-2024-1086-Exploit0★ · 2025-09-04
- lobo360/iptables-ubuntu0★ · 2024-09-03
- xzx482/CVE-2024-10860★ · 2024-07-04
- b1nhack/CVE-2024-1086
- vettrivel007/CVE-2024-1086
- NGChuen/linux-kernel-bugs
- eavil666/cve-poc-mapper