Home / Vulnerabilities / CVE-2024-1086
HIGH SEVERITY Ransomware Linked
CVE-2024-1086 Linux · Kernel

Linux Kernel Use-After-Free Vulnerability

Critical Threat Advisory: This vulnerability is documented in active Ransomware campaigns. Immediate remediation required.

Technical Severity

CVSS v3.1 Metrics

HIGH
7.8 / 10
Minimal Risk Critical
Vector Specification
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitation Likelihood

EPSS Prediction

84.61 %
Predictive Probability
Percentile Rank
99.3 th

Documented as more likely to be exploited than 99.3% of known CVEs.

Detection Date

May 30, 2024

Remediation Due

Jun 20, 2024

CISA Catalog Active

Threat Analysis

Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.

Remediation Directive

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

External Intelligence

This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see:

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660
NVD

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2024-1086