“Running the exploit as a normal user on a vulnerable machine will grant you root access to the box, allowing you to do whatever you want on it.”
CVE-2024-1086 is a double free in netfilter’s nf_tables, and the published exploit works on kernels from 5.14 to 6.6.14. The researcher reports a 99.4 percent success rate on 6.4.16. It needs unprivileged user namespaces, which Debian and Ubuntu enable by default. The fix shipped at the end of January, so every box still exposed belongs to someone who skipped two months of updates.