{"id":28644,"date":"2024-03-29T08:12:28","date_gmt":"2024-03-29T08:12:28","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=28644"},"modified":"2026-04-17T18:07:38","modified_gmt":"2026-04-17T18:07:38","slug":"linux-kernel-privilege-escalation-vulnerability-cve-2024-1086-alert","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/linux-kernel-privilege-escalation-vulnerability-cve-2024-1086-alert\/","title":{"rendered":"Linux Kernel Privilege Escalation Vulnerability (CVE-2024-1086) Alert"},"content":{"rendered":"\n

NSFOCUS CERT has detected that details and a proof-of-concept (PoC) tool for a Linux kernel privilege escalation vulnerability CVE-2024-1086, have been publicly disclosed recently.<\/p>\n\n\n\n

Due to a use-after-free vulnerability in the netfilter: nf_tables component of the Linux kernel, the nft_verdict_init() function allows the use of positive values as a drop error in the hook verdict. When NF_DROP issues a drop error similar to NF_ACCEPT, the nf_hook_slow() function could lead to a double-free vulnerability. Local attackers could exploit this flaw to elevate privileges from a regular user to root. As a PoC has been made public, affected users are urged to take protective measures promptly.<\/p>\n\n\n\n

Netfilter is a framework provided by the Linux kernel that allows the implementation of various network-related operations in the form of custom handlers. Netfilter offers various functionalities and operations for packet filtering, network address translation, and port translation, which provide the necessary features to guide packets through the network and prevent them from reaching sensitive areas within the network.<\/p>\n\n\n\n

Affected Scope<\/h2>\n\n\n\n

Affected Versions:<\/strong> 3.15 <= Linux kernel <= 6.8-rc1<\/p>\n\n\n\n

Note: Known distributions such as Redhat, Ubuntu, Debian, etc., are affected.<\/p>\n\n\n\n

Unaffected Versions: <\/strong>Linux kernel >= 6.8-rc2<\/p>\n\n\n\n

Vulnerability Detection<\/h2>\n\n\n\n

Version Detection<\/strong><\/p>\n\n\n\n

Linux system users can determine if their current system is within the affected range by checking the version. The command to view the operating system version information is as follows:<\/p>\n\n\n

\n
\"Red<\/a><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

Mitigation Methods<\/h2>\n\n\n\n

The kernel version has been upgraded officially to fix this vulnerability. Affected users are advised to update their versions as soon as possible for protection. Download link: https:\/\/kernel.org\/<\/a>.<\/p>\n\n\n\n