CVE-2024-1086: netapp h300s firmware +17 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2024-1086

CVSS 7.8 · High KEV · sudah dieksploitasi Dipakai ransomware EPSS 28,1%

Kerentanan Use After Free pada netapp h300s firmware, netapp h500s firmware +16 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD. Masuk katalog KEV CISA pada 30 Mei 2024, artinya sudah terbukti dieksploitasi. Tercatat dipakai dalam kampanye ransomware.

Deskripsi (NVD)

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.

Rincian

Terbit di NVD: 31 Januari 2024
Terakhir diubah: 7 Agustus 2026
Status NVD: Analyzed
CVSS 3.1: 7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-416: Use After Free
EPSS (30 hari): 28,1% peluang dieksploitasi; lebih tinggi dari 98,0% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: Linux Kernel Use-After-Free Vulnerability
Masuk KEV: 30 Mei 2024
Tenggat CISA: 20 Juni 2024 (untuk instansi federal AS)
Ransomware: Tercatat dipakai dalam kampanye ransomware
Tindakan wajib: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
netapp	h300s firmware	Semua versi
netapp	h500s firmware	Semua versi
netapp	h700s firmware	Semua versi
netapp	h410s firmware	Semua versi
netapp	h410c firmware	Semua versi
netapp	bootstrap os	Semua versi
linux	linux kernel	Versi 3.15 hingga sebelum 5.15.149
linux	linux kernel	Versi 6.1 hingga sebelum 6.1.76
linux	linux kernel	Versi 6.2 hingga sebelum 6.6.15
linux	linux kernel	Versi 6.7 hingga sebelum 6.7.3
linux	linux kernel	Versi 6.8 rc1
fedoraproject	fedora	Versi 39
redhat	enterprise linux desktop	Versi 7.0
redhat	enterprise linux for ibm z systems	Versi 7.0_s390x
redhat	enterprise linux for power big endian	Versi 7.0_ppc64
redhat	enterprise linux for power little endian	Versi 7.0_ppc64le
redhat	enterprise linux server	Versi 7.0
redhat	enterprise linux workstation	Versi 7.0
debian	debian linux	Versi 10.0
netapp	a250 firmware	Semua versi
netapp	500f firmware	Semua versi
netapp	c250 firmware	Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

http://www.openwall.com/lists/oss-security/2024/04/10/22 mailing list · patch
http://www.openwall.com/lists/oss-security/2024/04/10/23 mailing list · patch
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c... patch
https://kernel.dance/f342de4e2f33e0e39165d8639387aa6c19dff660 patch
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-1086 pemerintah AS
https://github.com/Notselwyn/CVE-2024-1086 exploit · advisory pihak ketiga
https://pwning.tech/nftables/ exploit · deskripsi teknis · advisory pihak ketiga
https://security.netapp.com/advisory/ntap-20240614-0009/ advisory pihak ketiga
http://www.openwall.com/lists/oss-security/2024/04/14/1 exploit · mailing list
http://www.openwall.com/lists/oss-security/2024/04/17/5 exploit · mailing list
http://www.openwall.com/lists/oss-security/2024/04/15/2 mailing list
https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html mailing list
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html mailing list
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LSPIOMIJYTLZB6... mailing list
https://news.ycombinator.com/item?id=39828424 issue tracking

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.