SARA / Free Tools / KEV / CVE-2024-36971

CVE-2024-36971 on CISA KEV

In the Linux kernel, the following vulnerability has been resolved:

CISA KEV — Actively Exploited

Android Kernel Remote Code Execution Vulnerability

Vendor / Product

— / Android / Kernel

Added to KEV

2024-08-07

BOD 22-01 due

2024-08-28

Ransomware use

Unknown

CVSS / EPSS

— — · EPSS 44.00%

01What CISA says about this vulnerability

In the Linux kernel, the following vulnerability has been resolved:

02Required action — verbatim from CISA

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

03Notes & references

git.kernel.org — https://git.kernel.org/stable/c/051c0bde9f0450a2ec3d62a86d2a0d2fad117f13
git.kernel.org — https://git.kernel.org/stable/c/db0082825037794c5dba9959c9de13ca34cc5e72
git.kernel.org — https://git.kernel.org/stable/c/2295a7ef5c8c49241bff769e7826ef2582e532a6
git.kernel.org — https://git.kernel.org/stable/c/eacb8b195579c174a6d3e12a9690b206eb7f28cf
git.kernel.org — https://git.kernel.org/stable/c/81dd3c82a456b0015461754be7cb2693991421b4
git.kernel.org — https://git.kernel.org/stable/c/5af198c387128a9d2ddd620b0f0803564a4d4508
git.kernel.org — https://git.kernel.org/stable/c/b8af8e6118a6605f0e495a58d591ca94a85a50fc
git.kernel.org — https://git.kernel.org/stable/c/92f1655aa2b2294d0b49925f3b875a634bd3b59e

04SARA's analyst layer — why this matters

This vulnerability is currently on the CISA KEV list, which CISA only adds CVEs to when there is reliable evidence of active exploitation in the wild. For federal civilian agencies, BOD 22-01 requires remediation by the due date above. For everyone else, KEV is the strongest "patch immediately" signal you can get from public threat intel.

05Affected products (summary)

Vendor	Product	Versions
Linux	Linux	a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314, a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314, a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314, a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314, a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314, a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314, a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314, a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314
Linux	Linux	4.6, 0, 4.19.316, 5.4.278, 5.10.219, 5.15.161, 6.1.94, 6.6.34, 6.9.4, 6.10

06Detection

Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection:

Open in Sigma generator →

Programmatic KEV data?
SARA's API returns KEV, CVSS, EPSS + analyst summary in one call.

Read the API reference →

Full CVE detail → Search KEV →