Linux Kernel 3.15-5.15.149 - Use-After-Free in nf_tables Component
Title source: llmExploitation Summary
CVE-2024-1086 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added May 30, 2024, with confirmed use in ransomware campaigns. EIP tracks 14 public exploits from researchers including Notselwyn, LLfam, kevcooper.
AI-analyzed exploit summary This repository contains a functional local privilege escalation (LPE) exploit for CVE-2024-1086, targeting Linux kernels between v5.14 and v6.6. The exploit leverages a use-after-free vulnerability in the nf_tables subsystem to achieve root privileges with a high success rate (99.4% in KernelCTF environments).
Description
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
Exploits (14)
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2024-1086, targeting Linux kernels between v5.14 and v6.6. The exploit leverages a use-after-free vulnerability in the nf_tables subsystem to achieve root privileges with a high success rate (99.4% in KernelCTF environments).
This repository contains a functional exploit for CVE-2024-1086, a Linux kernel vulnerability in nftables that allows local privilege escalation (LPE) via a double-free in the netfilter subsystem. The exploit leverages namespace isolation, memory spraying, and a double-free to corrupt kernel memory and overwrite modprobe_path, achieving root access.
This repository contains a Python script that checks for kernel configurations vulnerable to CVE-2024-1086, a local privilege escalation vulnerability in the Linux kernel. It verifies kernel version, configuration settings, and module status to determine exploitability.
This repository provides a Dockerized environment to test CVE-2024-1086, a local privilege escalation vulnerability. It clones and compiles an exploit from Notselwyn's repository, demonstrating successful privilege escalation to root.
This repository contains a functional exploit for CVE-2024-1086, a Linux kernel vulnerability involving a double-free in the nftables subsystem. The exploit leverages netfilter rules and crafted IP packets to trigger memory corruption, leading to privilege escalation.
This repository contains a functional exploit for CVE-2024-1086, a Linux kernel vulnerability involving a double-free in the netfilter subsystem. The exploit leverages crafted nftables rules and network packets to trigger memory corruption, leading to privilege escalation.
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2024-1086, targeting Linux kernels v5.14 to v6.6. The exploit leverages a use-after-free vulnerability in the nf_tables subsystem to achieve root privileges with a high success rate (99.4% in KernelCTF environments).
This repository provides a detailed technical analysis and proof-of-concept for CVE-2024-1086, a Linux kernel nf_tables use-after-free vulnerability leading to local privilege escalation. It includes vulnerability breakdown, affected versions, exploitation methodology, and mitigation guidance.
This repository contains a functional exploit for CVE-2024-1086, a Linux kernel vulnerability. The exploit is written in C and includes custom headers and libraries for compatibility, targeting the nftables subsystem.
This repository is a non-functional educational template for CVE-2024-1086, a use-after-free vulnerability in the Linux kernel's `nf_tables` component. It includes placeholder code in C and Java, designed for controlled lab environments, with no actual exploit functionality.
This repository contains a functional local privilege escalation exploit for CVE-2024-1086, targeting Linux kernels between v5.14 and v6.6. The exploit leverages a use-after-free vulnerability in the nf_tables subsystem to achieve root privileges.
The repository contains only a README.md file with minimal content (just the CVE identifier) and no exploit code or technical details.
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2024-1086, targeting Linux kernels between v5.14 and v6.6. The exploit leverages a use-after-free vulnerability in the nf_tables subsystem to achieve root privileges, with a high success rate in controlled environments.
References (15)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H