Cybersecurity and Infrastructure Security Agency (CISA) added to its catalog of actively exploited vulnerabilities a recently discovered issue in the Linux kernel: CVE-2024-1086 Linux Kernel Use-After-Free Vulnerability.
This concerns the nf_tables component within the netfilter firewall built into the kernel, which can be exploited for local privilege escalation. The flaw relates to the improper interaction between the nft_verdict_init() and nf_hook_slow() functions, leading to double free of memory.
It is strongly recommended to urgently update or roll back the kernel to a version prior to commit f342de4e2f33e0e39165d8639387aa6c19dff660
Source: linux.org.ru
