---
id: 5678
title: "[CVE-2024-26809] OtterRoot: Netfilter universal root 1-day"
cve: CVE-2024-26809
source_domain: osec.io
source_url: "https://osec.io/blog/netfilter-universal-root-1-day/"
published_at: "2024-11-25T00:00:00Z"
tags: ["linux", "privilege-escalation", "kernel", "container-escape", "netfilter", "cve-2024-26809"]
phying_url: "https://phying.com/item/5678"
lang: en
---

# [CVE-2024-26809] OtterRoot: Netfilter universal root 1-day

## Summary

OtterSec's OtterRoot: how monitoring Linux kernel commits enabled exploiting a netfilter 1-day (CVE-2024-26809) within the patch gap for universal LPE/container escape and a KernelCTF win.

## Intelligence Metadata

- **Sources:** osec.io
- **CVE:** CVE-2024-26809
- **Published:** 2024-11-25T00:00:00Z
- **Original:** https://osec.io/blog/netfilter-universal-root-1-day/
- **Phying News:** https://phying.com/item/5678