login
quiescence.eu
Saltar para o conteúdo

CVE-2024-1086

Linux Kernel Use-After-Free Vulnerability

7.8
CVSS
28.1%
EPSS (exploit prob.)
98.1%
EPSS percentile
Yes
Actively exploited
Yes
Ransomware use
2024-05-30
Added
→ 0.0 pts
30-day EPSS trend

Summary

Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.

Affected software

Vendor: Linux  ·  Product: Kernel

Weakness types (CWE):

CWE-416

What to do

This vulnerability appears in CISA's Known Exploited Vulnerabilities catalog, meaning it is being exploited in the wild. Prioritize patching affected systems and verify exposure across your estate.

Related vulnerabilities in Linux

CVENameEPSSExploited
CVE-2022-0847 Linux Kernel Privilege Escalation Vulnerability 92.8% Yes
CVE-2016-5195 Linux Kernel Race Condition Vulnerability 83.5% Yes
CVE-2021-22555 Linux Kernel Heap Out-of-Bounds Write Vulnerability 78.7% Yes
CVE-2019-13272 Linux Kernel Improper Privilege Management Vulnerability 52.2% Yes
CVE-2021-3493 Linux Kernel Privilege Escalation Vulnerability 49.2% Yes
CVE-2013-2094 Linux Kernel Privilege Escalation Vulnerability 47.7% Yes
CVE-2013-6282 Linux Kernel Improper Input Validation Vulnerability 39.7% Yes
CVE-2014-3153 Linux Kernel Privilege Escalation Vulnerability 37.2% Yes

Is your domain exposed?

Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.

Get your free report

Sources: CISA KEV catalog · NVD · FIRST EPSS

This product uses the NVD API but is not endorsed or certified by the NVD.

All information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.