<story><title>Flipping Pages: New Linux vulnerability in nf_tables and exploitation techniques</title><url>https://pwning.tech/nftables/</url></story><parent_chain><item><author>Unroll0201</author><text>Today I published a proof-of-concept exploit for CVE-2024-1086, working on Debian and Ubuntu among others.&lt;p&gt;The affected exploit versions are from Linux kernel v5.14 up to v6.6. The support for v6.4 to v6.6 is depending on the `CONFIG_INIT_ON_ALLOC_DEFAULT_ON` kernel config variable, but please check README.md for this info.&lt;p&gt;The bug was patched in February 2024, and has been labelled CVE-2024-1086.&lt;p&gt;Make sure to update your Linux devices!</text></item></parent_chain><comment><author>dev_snd</author><text>Great work and great write-up! I especially love the MAINFRAME BREACH PROTOCOL that comes with it.</text></comment>
<story><title>Flipping Pages: New Linux vulnerability in nf_tables and exploitation techniques</title><url>https://pwning.tech/nftables/</url></story><parent_chain><item><author>Unroll0201</author><text>Today I published a proof-of-concept exploit for CVE-2024-1086, working on Debian and Ubuntu among others.&lt;p&gt;The affected exploit versions are from Linux kernel v5.14 up to v6.6. The support for v6.4 to v6.6 is depending on the `CONFIG_INIT_ON_ALLOC_DEFAULT_ON` kernel config variable, but please check README.md for this info.&lt;p&gt;The bug was patched in February 2024, and has been labelled CVE-2024-1086.&lt;p&gt;Make sure to update your Linux devices!</text></item></parent_chain><comment><author>junon</author><text>Haha. Nice sources. And nice work, curious what the larger response to this will be.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;Notselwyn&amp;#x2F;CVE-2024-1086&amp;#x2F;blob&amp;#x2F;main&amp;#x2F;src&amp;#x2F;main.c#L197&quot;&gt;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;Notselwyn&amp;#x2F;CVE-2024-1086&amp;#x2F;blob&amp;#x2F;main&amp;#x2F;src&amp;#x2F;mai...&lt;/a&gt;</text></comment>