{"schema":"threatline.record/2","record":{"id":"CVE-2024-36971","aliases":[],"summary":"Android Kernel Remote Code Execution Vulnerability","details":"Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kernel and could impact other products, including but not limited to Android OS.","categories":["Operating systems"],"product":"Kernel","vendor":"Android","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-36971","source_modified_at":"2026-08-05T11:32:22.196Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Linux","vendor":"Linux","versions":[{"version":"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314","lessThan":"051c0bde9f0450a2ec3d62a86d2a0d2fad117f13","status":"affected","versionType":"git"},{"version":"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314","lessThan":"db0082825037794c5dba9959c9de13ca34cc5e72","status":"affected","versionType":"git"},{"version":"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314","lessThan":"2295a7ef5c8c49241bff769e7826ef2582e532a6","status":"affected","versionType":"git"},{"version":"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314","lessThan":"eacb8b195579c174a6d3e12a9690b206eb7f28cf","status":"affected","versionType":"git"},{"version":"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314","lessThan":"81dd3c82a456b0015461754be7cb2693991421b4","status":"affected","versionType":"git"},{"version":"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314","lessThan":"5af198c387128a9d2ddd620b0f0803564a4d4508","status":"affected","versionType":"git"},{"version":"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314","lessThan":"b8af8e6118a6605f0e495a58d591ca94a85a50fc","status":"affected","versionType":"git"},{"version":"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314","lessThan":"92f1655aa2b2294d0b49925f3b875a634bd3b59e","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-36971","source_modified_at":"2026-08-05T11:32:22.196Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Linux","vendor":"Linux","versions":[{"version":"4.6","status":"affected"},{"version":"0","lessThan":"4.6","status":"unaffected","versionType":"semver"},{"version":"4.19.316","lessThanOrEqual":"4.19.*","status":"unaffected","versionType":"semver"},{"version":"5.4.278","lessThanOrEqual":"5.4.*","status":"unaffected","versionType":"semver"},{"version":"5.10.219","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.161","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.94","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.34","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.9.4","lessThanOrEqual":"6.9.*","status":"unaffected","versionType":"semver"},{"version":"6.10","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-36971","source_modified_at":"2026-08-05T11:32:22.196Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"051c0bde9f0450a2ec3d62a86d2a0d2fad117f13","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-36971","source_modified_at":"2026-08-05T11:32:22.196Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"2295a7ef5c8c49241bff769e7826ef2582e532a6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-36971","source_modified_at":"2026-08-05T11:32:22.196Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"81dd3c82a456b0015461754be7cb2693991421b4","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-36971","source_modified_at":"2026-08-05T11:32:22.196Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"5af198c387128a9d2ddd620b0f0803564a4d4508","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-36971","source_modified_at":"2026-08-05T11:32:22.196Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"92f1655aa2b2294d0b49925f3b875a634bd3b59e","basis":"first unaffected version stated in the CVE record"}],"cvss":7.8,"severity":"High","kev":{"listed":true,"date_added":"2024-08-07","due_date":"2024-08-28","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.02701,"percentile":0.85836,"score_date":"2026-10-23"},"published_at":"2024-06-10T09:03:23.878Z","modified_at":"2026-08-05T11:32:22.196Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2024-36971","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-08-05T11:32:22.196Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2024-36971","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36971","source":"CISA KEV"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/051c0bde9f0450a2ec3d62a86d2a0d2fad117f13","tags":["x_transferred"]},{"source":"CVE List","url":"https://git.kernel.org/stable/c/db0082825037794c5dba9959c9de13ca34cc5e72","tags":["x_transferred"]},{"source":"CVE List","url":"https://git.kernel.org/stable/c/2295a7ef5c8c49241bff769e7826ef2582e532a6","tags":["x_transferred"]},{"source":"CVE List","url":"https://git.kernel.org/stable/c/eacb8b195579c174a6d3e12a9690b206eb7f28cf","tags":["x_transferred"]},{"source":"CVE List","url":"https://git.kernel.org/stable/c/81dd3c82a456b0015461754be7cb2693991421b4","tags":["x_transferred"]},{"source":"CVE List","url":"https://git.kernel.org/stable/c/5af198c387128a9d2ddd620b0f0803564a4d4508","tags":["x_transferred"]},{"source":"CVE List","url":"https://git.kernel.org/stable/c/b8af8e6118a6605f0e495a58d591ca94a85a50fc","tags":["x_transferred"]},{"source":"CVE List","url":"https://git.kernel.org/stable/c/92f1655aa2b2294d0b49925f3b875a634bd3b59e","tags":["x_transferred"]},{"source":"CVE List","url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-36971","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"active","automatable":"no","technical_impact":"total","assessed_at":"2024-08-08T03:55:25.565547Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-08-05T11:32:22.196Z","content_hash":"290ea7ec4ba3e37efeee041c782c9925ea5596bd6342e897aa03ae64d641e983"}}