CVE-2024-1086
Use-after-free in Linux kernel's netfilter: nf_tables component
- Published
- Jan 31, 2024
- Updated
- Aug 7, 2026
- Assigning CNA
- Evidence observed
- May 30, 2024
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HModerate · next 30 days
- Percentile
- 98.1%
- Model date
- Sep 21, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
CISA Known Exploited
This CVE appears in the CISA Known Exploited Vulnerabilities catalog.
Summary
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
Sources
15- CVE-2024-1086Exploit
Universal local privilege escalation exploit for CVE-2024-1086 targeting Linux kernels v5.14 to v6.6, with high success rate and fileless execution support.
- CVE-2024-1086Exploit
Local privilege escalation exploit for CVE-2024-1086 targeting Linux kernels v5.14 to v6.6, with a 99.4% success rate in KernelCTF environments.
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.