CVE-2024-1086

CISA KEV RANSOMWARE

ACT NOW Priority: 0.00 BB Relevance: 6/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.

CISA Known Exploited Vulnerability

Vendor / Product Linux — Kernel

Date Added 2024-05-30

Remediation Due 2024-06-20

Ransomware Use CONFIRMED

This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660; https://nvd.nist.gov/vuln/detail/CVE-2024-1086

Weakness Classification (1)

CWE-416

Affected Software (22)

Vendor	Product	Version
debian	debian_linux	10.0
fedoraproject	fedora	39
linux	linux_kernel	3.15 – 5.15.149
linux	linux_kernel	6.1 – 6.1.76
linux	linux_kernel	6.2 – 6.6.15
linux	linux_kernel	6.7 – 6.7.3
linux	linux_kernel	6.8
netapp	500f_firmware	-
netapp	a250_firmware	-
netapp	bootstrap_os	-
netapp	c250_firmware	-
netapp	h300s_firmware	-
netapp	h410c_firmware	-
netapp	h410s_firmware	-
netapp	h500s_firmware	-
netapp	h700s_firmware	-
redhat	enterprise_linux_desktop	7.0
redhat	enterprise_linux_for_ibm_z_systems	7.0_s390x
redhat	enterprise_linux_for_power_big_endian	7.0_ppc64
redhat	enterprise_linux_for_power_little_endian	7.0_ppc64le
redhat	enterprise_linux_server	7.0
redhat	enterprise_linux_workstation	7.0