This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] Linux Kernel Netfilter fixes 1 vulnerability
Linux fixes 1 vulnerability in the Netfilter component of the Kernel. The vulnerability affects Kernel versions 5.14 to 6.6.14 [1]. The fix is contained in a commit, which can be found at [2]. Individual releases and their fixed versions: Debian [3]: bullseye - 5.10.209-2 bookworm - 6.1.76-1 bookworm (security) - 6.1.85-1 trixie - 6.6.15-12 sid - 6.7.9.2 Ubuntu [4]: bionic - 4.15.0-223.235 focal - 5.4.0-174.193 jammy - 5.15.0-101.111 mantic - 6.5.0-26.26 xenial - 4.4.0-252.286
An authenticated local attacker can escalate their privileges by freeing allocated memory a second time (double free) [5]. Details of the vulnerability and its exploitation can be found at [1]. A PoC is available for the vulnerability [6].
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
More information:
- CVE-2024-1086 at cve.org, NVD
- CWE-416 at cwe.mitre.org
The vulnerability was publicly disclosed 31. 1. 2024.
Links
- [1] https://pwning.tech/nftables/
- [2] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660
- [3] https://security-tracker.debian.org/tracker/CVE-2024-1086
- [4] https://ubuntu.com/security/CVE-2024-1086
- [5] https://nvd.nist.gov/vuln/detail/CVE-2024-1086
- [6] https://github.com/Notselwyn/CVE-2024-1086
By CESNET, z.s.p.o. Martin Krajči on 15. 4. 2024.