PT-2024-7739 · Linux+5 · Linux Kernel+5
Published
2024-02-19
·
Updated
2025-08-05
·
CVE-2024-26809
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.28
Description
A critical security flaw has been discovered in the Linux kernel's nftables subsystem, which is responsible for packet filtering in modern Linux distributions. The vulnerability is related to a double-free issue in the netfilter component, specifically in the
nft set pipapo function. This flaw can be exploited to achieve a local privilege escalation, allowing an attacker to gain root access. A Proof-of-Concept (PoC) exploit has been released, demonstrating the vulnerability's severity.Recommendations
To resolve the issue, update the Linux kernel to version 6.6.28 or later. This update includes the necessary fixes to address the double-free vulnerability in the nftables subsystem. Ensure that all affected systems are updated as soon as possible to prevent potential exploitation.
Exploit
Fix
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu