All vulnerabilities
CVE-2024-36971

Android Kernel Remote Code Execution Vulnerability

Android KernelOperating systems
Open in ThreatlineRecord JSON
CVSS
7.8High
ExploitationExploited in the wildAdded to KEV 7 Aug 2024CISA KEV
Exploit odds (EPSS)2.70%Chance of exploitation activity in the next 30 days, higher than 85% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in051c0bde9f0450a2ec3d62a86d2a0d2fad117f13Also 2295a7ef5c8c49241bff769e7826ef2582e532a6, 81dd3c82a456b0015461754be7cb2693991421b4 and 2 moreCVE List
Federal deadline28 Aug 2024Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

  • 051c0bde9f0450a2ec3d62a86d2a0d2fad117f13LinuxCVE List
  • 2295a7ef5c8c49241bff769e7826ef2582e532a6LinuxCVE List
  • 81dd3c82a456b0015461754be7cb2693991421b4LinuxCVE List
  • 5af198c387128a9d2ddd620b0f0803564a4d4508LinuxCVE List
  • 92f1655aa2b2294d0b49925f3b875a634bd3b59eLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 10 Jun 2024, 09:03 UTCPublishedCVE List
  2. 7 Aug 2024Added to CISA KEVCISA KEV

Description

Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kernel and could impact other products, including but not limited to Android OS.

Text from CVE List

Affected versions 18

  • Linuxaffected: a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 before 051c0bde9f0450a2ec3d62a86d2a0d2fad117f13CVE List
  • Linuxaffected: a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 before db0082825037794c5dba9959c9de13ca34cc5e72CVE List
  • Linuxaffected: a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 before 2295a7ef5c8c49241bff769e7826ef2582e532a6CVE List
  • Linuxaffected: a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 before eacb8b195579c174a6d3e12a9690b206eb7f28cfCVE List
  • Linuxaffected: a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 before 81dd3c82a456b0015461754be7cb2693991421b4CVE List
  • Linuxaffected: a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 before 5af198c387128a9d2ddd620b0f0803564a4d4508CVE List
  • Linuxaffected: a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 before b8af8e6118a6605f0e495a58d591ca94a85a50fcCVE List
  • Linuxaffected: a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 before 92f1655aa2b2294d0b49925f3b875a634bd3b59eCVE List
  • Linuxaffected: 4.6CVE List
  • Linuxunaffected: all versions before 4.6CVE List
  • Linuxunaffected: 4.19.316 through 4.19.*CVE List
  • Linuxunaffected: 5.4.278 through 5.4.*CVE List
  • Linuxunaffected: 5.10.219 through 5.10.*CVE List
  • Linuxunaffected: 5.15.161 through 5.15.*CVE List
  • Linuxunaffected: 6.1.94 through 6.1.*CVE List
  • Linuxunaffected: 6.6.34 through 6.6.*CVE List
  • Linuxunaffected: 6.9.4 through 6.9.*CVE List
  • Linuxunaffected: 6.10CVE List

References 11