Live › vulnerability › CVE-2024-1086
Go to dashboardThe Linux kernel's netfilter nf_tables component has a use-after-free bug. A local user can use it to gain root privileges on the machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| netapp h300s firmware | vendor | – | – |
| netapp h500s firmware | vendor | – | – |
| netapp h700s firmware | vendor | – | – |
| netapp h410s firmware | vendor | – | – |
| netapp h410c firmware | vendor | – | – |
| netapp bootstrap os | vendor | – | – |
| linux kernel | vendor | >= 3.15, < 5.15.149 | 5.15.149 |
| linux kernel | vendor | >= 6.1, < 6.1.76 | 6.1.76 |
| linux kernel | vendor | >= 6.2, < 6.6.15 | 6.6.15 |
| linux kernel | vendor | >= 6.7, < 6.7.3 | 6.7.3 |
| linux kernel | vendor | = 6.8 | – |
| fedoraproject fedora | vendor | = 39 | – |
| redhat enterprise linux desktop | vendor | = 7.0 | – |
| redhat enterprise linux for ibm z systems | vendor | = 7.0_s390x | – |
| redhat enterprise linux for power big endian | vendor | = 7.0_ppc64 | – |
| redhat enterprise linux for power little endian | vendor | = 7.0_ppc64le | – |
| redhat enterprise linux server | vendor | = 7.0 | – |
| redhat enterprise linux workstation | vendor | = 7.0 | – |
| debian linux | vendor | = 10.0 | – |
| netapp a250 firmware | vendor | – | – |
| netapp 500f firmware | vendor | – | – |
| netapp c250 firmware | vendor | – | – |
| Linux Kernel | vendor | – | – |
Unknown from the sources.
Upgrade to 5.15.149 / 6.1.76 / 6.6.15 / 6.7.3
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.
We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
This page as .md · .json · in your agent: get_signal("CVE-2024-1086")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.