PT-2024-1597 · Linux +10 · Linux Kernel +10
Notselwyn
·
Published
2024-01-24
·
Updated
2025-09-20
·
CVE-2024-1086
7.8
High
| Base vector | Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions 5.14 through 6.6
Description:
A use-after-free vulnerability in the Linux kernel's netfilter: nf tables component can be exploited to achieve local privilege escalation. The nft verdict init() function allows positive values as drop error within the hook verdict, and hence the nf hook slow() function can cause a double free vulnerability when NF DROP is issued with a drop error which resembles NF ACCEPT. This vulnerability can be exploited by an authorized user on the system to elevate their privileges to the level of root. A publicly available exploit exists for this vulnerability, and instances of its exploitation have been recorded.
Recommendations:
To resolve the issue, upgrade past commit f342de4e2f33e0e39165d8639387aa6c19dff660. As a temporary workaround, consider disabling the `nft verdict init()` function until a patch is available. Restrict access to the vulnerable `nf tables` module to minimize the risk of exploitation. Avoid using the `NF DROP` parameter in the affected API endpoint until the issue is resolved.
Exploit
Fix
LPE
Use After Free
Weakness Enumeration
Related Identifiers
Affected Products
References · 1985
- 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb⭐ 35285 🔗 14255 · Exploit
- 🔥 https://github.com/Notselwyn/CVE-2024-1086⭐ 2382 🔗 318 · Exploit
- 🔥 https://github.com/notselwyn/cve-2024-1086⭐ 2374 🔗 317 · Exploit
- 🔥 https://github.com/xkaneiki/CVE-2023-0386⭐ 390 🔗 63 · Exploit
- 🔥 https://github.com/Liuk3r/CVE-2023-32233⭐ 371 🔗 76 · Exploit
- 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC⭐ 215 🔗 35 · Exploit
- 🔥 https://github.com/H4K6/CVE-2023-0179-PoC⭐ 202 🔗 26 · Exploit
- 🔥 https://github.com/synacktiv/CVE-2023-35001⭐ 164 🔗 25 · Exploit
- 🔥 https://github.com/chenaotian/CVE-2023-0386⭐ 117 🔗 21 · Exploit
- 🔥 https://github.com/lrh2000/CVE-2023-2002⭐ 85 🔗 9 · Exploit
- 🔥 https://github.com/lanleft/CVE-2023-1829⭐ 71 🔗 15 · Exploit
- 🔥 https://github.com/oferchen/POC-CVE-2023-32233⭐ 50 🔗 7 · Exploit
- 🔥 https://github.com/sxlmnwb/CVE-2023-0386⭐ 39 🔗 3 · Exploit
- 🔥 https://github.com/Fanxiaoyao66/CVE-2023-0386⭐ 15 🔗 5 · Exploit
- 🔥 https://github.com/LLfam/CVE-2024-1086⭐ 15 🔗 2 · Exploit