CVE-2024-1086

Note

Priority reason:
By passing a positive value such as NF_ACCEPT, a local attacker can elevate privileges due to a use-after-free error.
from Google kCTF.
the fix commit reverts the break commit.
If not needed, disable the ability for unprivileged users
to create namespaces. To do this temporarily, do:
  sudo sysctl -w kernel.unprivileged_userns_clone=0
To disable across reboots, do:
  echo kernel.unprivileged_userns_clone=0 | \
  sudo tee /etc/sysctl.d/99-disable-unpriv-userns.conf

Parameter	Value
Base score	7.8
Attack vector	Local
Attack complexity	Low
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2024-1086

From the Ubuntu Security Team

Notes

Mitigation

Priority

Cvss 3 Severity Score

Status

Severity score breakdown

References

Bugs

Join the discussion

Canonical is offering Expanded Security Maintenance

Further reading

Author	Note
	Priority reason: By passing a positive value such as NF_ACCEPT, a local attacker can elevate privileges due to a use-after-free error.
rodrigo-zaiden	from Google kCTF. the fix commit reverts the break commit.

Package	Release	Status
linux Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-223.235) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	focal	Released (5.4.0-174.193)
	jammy	Released (5.15.0-101.111)
	mantic	Released (6.5.0-26.26)
	noble	Not vulnerable (6.8.0-11.11)
	trusty	Not vulnerable (3.11.0-12.19)
	upstream	Released (6.8~rc2)
	xenial	Released (4.4.0-252.286) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	Patches: Introduced by e0abdadcc6e113ed2e22c85b350074487095875b Fixed by f342de4e2f33e0e39165d8639387aa6c19dff660
linux-allwinner-5.19 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Ignored (end of kernel support)
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (end of life)
	xenial	Does not exist
linux-aws Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-1166.179) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	focal	Released (5.4.0-1121.131)
	jammy	Released (5.15.0-1056.61)
	mantic	Released (6.5.0-1016.16)
	noble	Not vulnerable (6.8.0-1001.1)
	trusty	Released (4.4.0-1129.135) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	upstream	Released (6.8~rc2)
	xenial	Released (4.4.0-1167.182) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
linux-aws-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-aws-5.3)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (superseded by linux-aws-5.3)
	xenial	Does not exist
linux-aws-5.11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Ignored (superseded by linux-aws-5.13)
	jammy	Does not exist
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (superseded by linux-aws-5.13)