CVE-2024-36971 — Android Kernel Remote Code Execution Vulnerability

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2024-08-07 00:00 UTC
  • Importiert: 2026-10-20 22:46 UTC
  • CVSS: 7.8
  • Quelle-ID: cisa_kev
  • uid_hash: fb26f15c06709ea9fc9e6bc409f8e13fc4b1febf4ee6bef189af06a0c55c7ae2

Inhalt

Vendor / Project: Android Product: Kernel Description: Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kernel and could impact other products, including but not limited to Android OS. Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Due Date: 2024-08-28 Ransomware Campaign Use: Unknown CWEs: CWE-416 Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://source.android.com/docs/security/bulletin/2024-08-01, https://lore.kernel.org/linux-cve-announce/20240610090330.1347021-2-lee@kernel.org/T/#u ; https://nvd.nist.gov/vuln/detail/CVE-2024-36971

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2024-36971

HIGH

7.8

HIGH

7.8

2024-06-10

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CISA – Known Exploited Vulnerabilities (KEV)

cisa_kev

threat_intel cisa, kev - de https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json