CVE-2024-38601 — In the Linux kernel, the following vulnerability has been resolved:
In the Linux kernel, the following vulnerability has been resolved:
Published
2024-06-19T13:48:13.097Z
Last modified
2025-11-04T17:21:44.865Z
01What is this vulnerability?
In the Linux kernel, the following vulnerability has been resolved:
02Affected products
| Vendor | Product | Versions |
|---|
| Linux | Linux | 659f451ff21315ebfeeb46b9adccee8ce1b52c25, 659f451ff21315ebfeeb46b9adccee8ce1b52c25, 659f451ff21315ebfeeb46b9adccee8ce1b52c25, 659f451ff21315ebfeeb46b9adccee8ce1b52c25, 659f451ff21315ebfeeb46b9adccee8ce1b52c25, 659f451ff21315ebfeeb46b9adccee8ce1b52c25, 659f451ff21315ebfeeb46b9adccee8ce1b52c25, 659f451ff21315ebfeeb46b9adccee8ce1b52c25, 659f451ff21315ebfeeb46b9adccee8ce1b52c25 |
| Linux | Linux | 3.5, 0, 4.19.316, 5.4.278, 5.10.219, 5.15.161, 6.1.93, 6.6.33, 6.8.12, 6.9.3, 6.10 |
03Active exploitation status
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
04Recommended remediation
- Patch to a fixed version listed in the vendor advisory (see references below).
- Mitigate with WAF rules, network egress filters, or feature flags where the patch is not yet available.
- Hunt historical logs for exploitation indicators — see Detection signatures below.
05Technical details
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
06Detection signatures
Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection in your stack of choice:
Open in Sigma generator →
07Related CVEs
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.
08Timeline
- Published: 2024-06-19T13:48:13.097Z
- Last modified: 2025-11-04T17:21:44.865Z
09References
- git.kernel.org — https://git.kernel.org/stable/c/b50932ea673b5a089a4bb570a8a868d95c72854e
- git.kernel.org — https://git.kernel.org/stable/c/c68b7a442ee61d04ca58b2b5cb5ea7cb8230f84a
- git.kernel.org — https://git.kernel.org/stable/c/1e160196042cac946798ac192a0bc3398f1aa66b
- git.kernel.org — https://git.kernel.org/stable/c/595363182f28786d641666a09e674b852c83b4bb
- git.kernel.org — https://git.kernel.org/stable/c/54c64967ba5f8658ae7da76005024ebd3d9d8f6e
- git.kernel.org — https://git.kernel.org/stable/c/af3274905b3143ea23142bbf77bd9b610c54e533
- git.kernel.org — https://git.kernel.org/stable/c/5ef9e330406d3fb4f4b2c8bca2c6b8a93bae32d1
- git.kernel.org — https://git.kernel.org/stable/c/79b52013429a42b8efdb0cda8bb0041386abab87
- git.kernel.org — https://git.kernel.org/stable/c/c2274b908db05529980ec056359fae916939fdaa
Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →