CVE-2024-38549 — In the Linux kernel, the following vulnerability has been resolved:
In the Linux kernel, the following vulnerability has been resolved:
Published
2024-06-19T13:35:22.042Z
Last modified
2025-11-04T17:21:22.970Z
01What is this vulnerability?
In the Linux kernel, the following vulnerability has been resolved:
02Affected products
| Vendor | Product | Versions |
|---|
| Linux | Linux | 119f5173628aa7a0c3cf9db83460d40709e8241d, 119f5173628aa7a0c3cf9db83460d40709e8241d, 119f5173628aa7a0c3cf9db83460d40709e8241d, 119f5173628aa7a0c3cf9db83460d40709e8241d, 119f5173628aa7a0c3cf9db83460d40709e8241d, 119f5173628aa7a0c3cf9db83460d40709e8241d, 119f5173628aa7a0c3cf9db83460d40709e8241d, 119f5173628aa7a0c3cf9db83460d40709e8241d, 119f5173628aa7a0c3cf9db83460d40709e8241d |
| Linux | Linux | 4.7, 0, 4.19.316, 5.4.278, 5.10.219, 5.15.161, 6.1.93, 6.6.33, 6.8.12, 6.9.3, 6.10 |
03Active exploitation status
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
04Recommended remediation
- Patch to a fixed version listed in the vendor advisory (see references below).
- Mitigate with WAF rules, network egress filters, or feature flags where the patch is not yet available.
- Hunt historical logs for exploitation indicators — see Detection signatures below.
05Technical details
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
06Detection signatures
Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection in your stack of choice:
Open in Sigma generator →
07Related CVEs
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.
08Timeline
- Published: 2024-06-19T13:35:22.042Z
- Last modified: 2025-11-04T17:21:22.970Z
09References
- git.kernel.org — https://git.kernel.org/stable/c/79078880795478d551a05acc41f957700030d364
- git.kernel.org — https://git.kernel.org/stable/c/be34a1b351ea7faeb15dde8c44fe89de3980ae67
- git.kernel.org — https://git.kernel.org/stable/c/d17b75ee9c2e44d3a3682c4ea5ab713ea6073350
- git.kernel.org — https://git.kernel.org/stable/c/0e3b6f9123726858cac299e1654e3d20424cabe4
- git.kernel.org — https://git.kernel.org/stable/c/13562c2d48c9ee330de1077d00146742be368f05
- git.kernel.org — https://git.kernel.org/stable/c/af26ea99019caee1500bf7e60c861136c0bf8594
- git.kernel.org — https://git.kernel.org/stable/c/9489951e3ae505534c4013db4e76b1b5a3151ac7
- git.kernel.org — https://git.kernel.org/stable/c/fb4aabdb1b48c25d9e1ee28f89440fd2ce556405
- git.kernel.org — https://git.kernel.org/stable/c/1e4350095e8ab2577ee05f8c3b044e661b5af9a0
Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →