CVE-2024-1086

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.14 through 6.6

Description A use-after-free issue exists in the netfilter: nf tables component of the Linux kernel. The nft verdict init() function allows positive values as drop errors within the hook verdict. Consequently, the nf hook slow() function can trigger a double free when NF DROP is issued with a drop error that resembles NF ACCEPT. A use-after-free occurs when the system frees memory associated with a network table but fails to nullify the pointer, leaving dangling references that can be reused. This flaw can be exploited by local attackers to achieve local privilege escalation, potentially allowing them to gain root access, disable defenses, modify files, install malware, or deploy ransomware. Real-world exploitation has been confirmed by CISA, with ransomware groups such as RansomHub and Akira utilizing this flaw.

Recommendations Update the Linux Kernel to a version incorporating commit f342de4e2f33e0e39165d8639387aa6c19dff660.