CVE-2024-36971 — Android Kernel Remote Code Execution Vulnerability
In the Linux kernel, the following vulnerability has been resolved:
Published
2024-06-10T09:03:23.878Z
Last modified
2025-11-04T17:21:17.010Z
CISA KEV — Actively Exploited
01What is this vulnerability?
In the Linux kernel, the following vulnerability has been resolved:
02Affected products
| Vendor | Product | Versions |
|---|
| Linux | Linux | a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314, a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314, a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314, a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314, a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314, a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314, a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314, a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 |
| Linux | Linux | 4.6, 0, 4.19.316, 5.4.278, 5.10.219, 5.15.161, 6.1.94, 6.6.34, 6.9.4, 6.10 |
03Active exploitation status
Yes — actively exploited. Added to the CISA KEV catalog on 2024-08-07. Ransomware use: Unknown.
04Recommended remediation
- Patch to a fixed version listed in the vendor advisory (see references below).
- Mitigate with WAF rules, network egress filters, or feature flags where the patch is not yet available.
- Hunt historical logs for exploitation indicators — see Detection signatures below.
05Technical details
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
06Detection signatures
Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection in your stack of choice:
Open in Sigma generator →
07Related CVEs
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.
08Timeline
- Published: 2024-06-10T09:03:23.878Z
- Last modified: 2025-11-04T17:21:17.010Z
- Added to CISA KEV: 2024-08-07
- BOD 22-01 due: 2024-08-28
09References
- git.kernel.org — https://git.kernel.org/stable/c/051c0bde9f0450a2ec3d62a86d2a0d2fad117f13
- git.kernel.org — https://git.kernel.org/stable/c/db0082825037794c5dba9959c9de13ca34cc5e72
- git.kernel.org — https://git.kernel.org/stable/c/2295a7ef5c8c49241bff769e7826ef2582e532a6
- git.kernel.org — https://git.kernel.org/stable/c/eacb8b195579c174a6d3e12a9690b206eb7f28cf
- git.kernel.org — https://git.kernel.org/stable/c/81dd3c82a456b0015461754be7cb2693991421b4
- git.kernel.org — https://git.kernel.org/stable/c/5af198c387128a9d2ddd620b0f0803564a4d4508
- git.kernel.org — https://git.kernel.org/stable/c/b8af8e6118a6605f0e495a58d591ca94a85a50fc
- git.kernel.org — https://git.kernel.org/stable/c/92f1655aa2b2294d0b49925f3b875a634bd3b59e
Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →