{"cve_id":"CVE-2024-1086","published":"2024-01-31T13:15:10.827000+00:00","last_modified":"2026-08-07T19:59:58.823000+00:00","vuln_status":"Analyzed","description":"A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\n\n\nThe nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.\n\n\n\nWe recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","base_score":7.8,"base_severity":"HIGH","attack_vector":"LOCAL","privileges_req":"LOW","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"HIGH","impact_i":"HIGH","impact_a":"HIGH","cwe_ids":["CWE-416"],"in_kev":true,"kev_date_added":"2024-05-30","kev_ransomware":true,"epss_score":0.28058,"epss_percentile":0.98107,"cap_rule_version":"0.1.1","stage":"EXECUTION","req_access":"USER","req_vector":"LOCAL","req_user_interaction":false,"grant_access":"USER","caps":["CODE_EXEC"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T10:50:55.800362+00:00","first_seen":"2024-01-31T13:15:10.827000+00:00","kev_first_seen":"2024-05-30T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["debian","fedoraproject","linux","netapp","redhat"],"products":["500f","500f_firmware","a250","a250_firmware","bootstrap_os","c250","c250_firmware","debian_linux","enterprise_linux_desktop","enterprise_linux_for_ibm_z_systems","enterprise_linux_for_power_big_endian","enterprise_linux_for_power_little_endian","enterprise_linux_server","enterprise_linux_workstation","fedora","h300s","h300s_firmware","h410c","h410c_firmware","h410s","h410s_firmware","h500s","h500s_firmware","h700s","h700s_firmware","hci_compute_node","linux_kernel"],"affected":[{"vendor":"debian","product":"debian_linux","ranges":["10.0"]},{"vendor":"fedoraproject","product":"fedora","ranges":["39"]},{"vendor":"linux","product":"linux_kernel","ranges":["≥ 6.1 and < 6.1.76","6.8","≥ 6.7 and < 6.7.3","≥ 6.2 and < 6.6.15","≥ 3.15 and < 5.15.149"]},{"vendor":"netapp","product":"500f_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"a250_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"bootstrap_os","ranges":["all versions"]},{"vendor":"netapp","product":"c250_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h300s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h410c_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h410s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h500s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h700s_firmware","ranges":["all versions"]},{"vendor":"redhat","product":"enterprise_linux_desktop","ranges":["7.0"]},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems","ranges":["7.0_s390x"]},{"vendor":"redhat","product":"enterprise_linux_for_power_big_endian","ranges":["7.0_ppc64"]},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian","ranges":["7.0_ppc64le"]},{"vendor":"redhat","product":"enterprise_linux_server","ranges":["7.0"]},{"vendor":"redhat","product":"enterprise_linux_workstation","ranges":["7.0"]}]}