Today I published a proof-of-concept exploit for CVE-2024-1086, working on Debian and Ubuntu among others.
The affected exploit versions are from Linux kernel v5.14 up to v6.6. The support for v6.4 to v6.6 is depending on the `CONFIG_INIT_ON_ALLOC_DEFAULT_ON` kernel config variable, but please check README.md for this info.
The bug was patched in February 2024, and has been labelled CVE-2024-1086.
The affected exploit versions are from Linux kernel v5.14 up to v6.6. The support for v6.4 to v6.6 is depending on the `CONFIG_INIT_ON_ALLOC_DEFAULT_ON` kernel config variable, but please check README.md for this info.
The bug was patched in February 2024, and has been labelled CVE-2024-1086.
Make sure to update your Linux devices!