Notselwyn/CVE-2024-1086

Health v2 · maintenance only

Adoption not part of the score

2457 stars · 330 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A proof-of-concept local privilege escalation exploit for CVE-2024-1086, a double-free vulnerability in the Linux kernel's nf_tables subsystem. It drops a root shell on most Linux kernels between v5.14 and v6.6 (Debian, Ubuntu, KernelCTF) with a 99.4% success rate in KernelCTF images.

Use cases

• demonstrate CVE-2024-1086 privilege escalation on a vulnerable Linux kernel
• test whether a Linux kernel between 5.14 and 6.6 is patched against the nf_tables double-free
• study kernel exploitation techniques like Dirty Pagedirectory in a lab environment
• validate kernel hardening configurations such as KernelCTF mitigation instances
• learn Linux kernel vulnerability research from a documented exploit write-up

When to choose

• you need a working PoC for CVE-2024-1086 on Debian, Ubuntu, or KernelCTF kernels
• you are doing security research or kernel exploitation education in an isolated lab
• you want a universal exploit that works across many kernel versions without recompiling

When to avoid

• you need a stealthy or persistent exploit - it deliberately causes a kernel panic after gaining root
• your target kernel is patched (v5.15.149+, v6.1.76+, v6.6.15+)
• the system disables unprivileged user namespaces or nf_tables, or runs a non-x64 architecture
• you need stability on systems with heavy network activity or WiFi

Facets

application · maturity stable

security penetration-testing cli security operating-systems penetration-testing developer-tools cli cpp cve-2024-1086 local-privilege-escalation kernel-exploit nftables proof-of-concept lpe exploit-development use-after-free linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Notselwyn/CVE-2024-1086")