What is the GHSA ID for CVE-2024-1086?

GitHub tracks CVE-2024-1086 as GHSA-gfh2-2mj9-m2cx.

What is the CVSS score of CVE-2024-1086?

CVE-2024-1086 has a CVSS 3.1 base score of 7.8 (High), vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

How do I fix CVE-2024-1086?

Upgrade to 6.8 or later. The fix is in commit f342de4.

Is CVE-2024-1086 exploited in the wild?

CISA lists it as a known exploited vulnerability (added 30 May 2024). CISA's SSVC assessment rates exploitation as "active". EPSS estimates a 28.05% chance of exploitation in the next 30 days, higher than 97% of CVEs.

CVE-2024-1086GHSA-gfh2-2mj9-m2cx

Use-after-free in Linux kernel's netfilter: nf_tables component

Q: Which versions are affected by CVE-2024-1086?

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git (GIT): >= 3.15, < 6.8.

CVE-2024-1086 (GitHub advisory GHSA-gfh2-2mj9-m2cx) is a high-severity vulnerability with a CVSS 3.1 base score of 7.8, classed as Use After Free (CWE-416), in git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git (Git repository). Affected versions: >= 3.15, < 6.8. It is fixed in 6.8. CISA lists it as a known exploited vulnerability (added 30 May 2024).

High7.8Known exploitedFix availableUnreviewed advisory

Published 31 Jan 2024Updated 7 Aug 2026

7.8HighCVSS 3.1

CVE ID: CVE-2024-1086
GHSA ID: GHSA-gfh2-2mj9-m2cx
EPSS: 28.05%higher than 97% of CVEs
Weakness (CWE): CWE-416Use After Free
KEV status: Known exploitedAdded 30 May 2024
Published: 31 Jan 2024
Updated: 7 Aug 2026
Ecosystem: Git repositories
Assigned by (CNA): Google

Summary

Source: GitHub Advisory Database

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.

The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.

We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.

Technical details

Source: GitHub Advisory Database

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

High7.8Base score from GitHub Advisory Database

Attack Vector AV: Local
Attack Complexity AC: Low
Privileges Required PR: Low
User Interaction UI: None
Scope S: Unchanged
Confidentiality C: High
Integrity I: High
Availability A: High

CISA SSVC decision points

Exploitation: active; Exploited in the wild
Automatable: no; Needs manual steps per target
Technical impact: total; Full control of the affected system

CISA Coordinator assessment (SSVC 2.0.3) via CVE.org.

CISA required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Federal agencies must remediate by 20 Jun 2024. Used in ransomware campaigns.

Affected packages

Source: OSV (CVE record)

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Git repositories
No PURL published
Affected versions
>= 3.15, < 6.8
Fixed in
6.8
Show 456 listed versions
- v6.8-rc1
- v6.7-rc1
- v6.8-rc7
- v6.8-rc6
- v6.8-rc5
- v6.8-rc4
- v6.8-rc3
- v6.8-rc2
- v6.7
- v6.7-rc3
- v6.7-rc8
- v6.7-rc7

Package	Affected versions	Fixed in
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git Git repositories No PURL published	>= 3.15, < 6.8 Show 456 listed versions v6.8-rc1 v6.7-rc1 v6.8-rc7 v6.8-rc6 v6.8-rc5 v6.8-rc4 v6.8-rc3 v6.8-rc2 v6.7 v6.7-rc3 v6.7-rc8 v6.7-rc7	6.8

Fix

Source: OSV (CVE record)

Fix available

Upgrade to 6.8 or later.

Patch commits

f342de4Patch commitgit.kernel.org/pub/scm/linux/kernel/git/stable/linux

Release commits

The commits each fixed release tag points at. They usually bump the version rather than contain the fix itself.

e8f897fRelease commit6.8git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux

Vulnerability intelligence

References

Fixes 1

git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0…

Advisories 4

Exploits and evidence 1

github.com/Notselwyn/CVE-2024-1086

Credits

Notselwynfinder

Questions about CVE-2024-1086

What is the GHSA ID for CVE-2024-1086?: GitHub tracks CVE-2024-1086 as GHSA-gfh2-2mj9-m2cx.
What is the CVSS score of CVE-2024-1086?: CVE-2024-1086 has a CVSS 3.1 base score of 7.8 (High), vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Which versions are affected by CVE-2024-1086?: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git (GIT): >= 3.15, < 6.8.
How do I fix CVE-2024-1086?: Upgrade to 6.8 or later. The fix is in commit f342de4.
Is CVE-2024-1086 exploited in the wild?: CISA lists it as a known exploited vulnerability (added 30 May 2024). CISA's SSVC assessment rates exploitation as "active". EPSS estimates a 28.05% chance of exploitation in the next 30 days, higher than 97% of CVEs.

Data sources

Upstream records

OSV (GitHub advisory)No record
GitHub Advisory DatabaseLoadedRaw JSON
OSV (CVE record)LoadedRaw JSON
CVE.orgLoaded
CISA KEV catalogLoaded

Fetched 5 days ago (10 Oct 2026, 12:03 UTC). Records refresh automatically after 24 hours.

Where each part of this page came from

Title and description: GitHub Advisory Database
Severity score: GitHub Advisory Database
Weakness (CWE): GitHub Advisory Database
Affected packages: OSV (CVE record)
Fix: OSV (CVE record)
References: Computed by CVEminer
SSVC: CVE.org
KEV status: CISA KEV catalog
EPSS: GitHub Advisory Database

OSV and GitHub Advisory Database content is licensed CC BY 4.0. Values marked as computed or derived were calculated by CVEminer from the upstream data.