CVE-2024-1086

CVE-2024-1086 is a critical use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component, impacting various Linux distributions including Debian, Fedora, and Red Hat. This flaw, rated High severity (CVSS 7.8), allows a local attacker with low privileges to execute arbitrary code and achieve full system compromise (privilege escalation) without user interaction. The vulnerability is actively exploited in the wild, including in ransomware campaigns, as confirmed by its presence on CISA's KEV catalog and extensive media coverage. While no public Metasploit or ExploitDB modules exist, the high community discussion and a publicly available Proof-of-Concept exploit indicate significant attention and a high likelihood of further exploitation.