Actively exploited vulnerability

CVE-2024-1086: Linux Kernel Use-After-Free Vulnerability

Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.

CISA KEV source 30 May 2024 added 20 Jun 2024 remediation due

Linux · Kernel

Known ransomware use: Known

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

The Register30 Mar 2024

Easy-to-use make-me-root exploit lands for recent Linux kernels. Get patching

CVE-2024-1086 turns the page tables on system admins A Linux privilege-escalation proof-of-concept exploit has been published that, according to the bug hunter who developed it, typically works effortlessly on kernel versions between at least 5.14 and 6.6.14. …

CVE-2024-1086: Linux Kernel Use-After-Free Vulnerability

Affected product

Required action

Related Yasna coverage

Easy-to-use make-me-root exploit lands for recent Linux kernels. Get patching