Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:ASB-A-343727534
HistoryAug 01, 2024 - 12:00 a.m.

SO_CNX_ADVICE Linux kernel LPE 0-day vulnerability

2024-08-0100:00:00
Google
osv.dev
42
linux kernel
lpe
vulnerability
sock.h
failure to clear
use after free
remote code execution
system execution privileges

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

43.6%

JSON

In __dst_negative_advice of sock.h, there is a possible failure to clear sk->sk_dst_cache in the correct order resulting in a use after free. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation.

References

Related

cbl_mariner 2
nessus 71
attackerkb 1
virtuozzo 1
redhat 26
cisa_kev 1
cve 1
osv 22
nvd 1
ubuntucve 1
redhatcve 1
vulnrichment 1
debiancve 1
malwarebytes 1
cvelist 1
f5 1
photon 3
amazon 1
thn 1
redos 1
rocky 4
oraclelinux 5
ubuntu 6
openvas 25
cbl_mariner
cbl_mariner
CVE-2024-36971 affecting package kernel for versions less than 5.15.158.2-1
2024-06-12 22:23:00
CVE-2024-36971 affecting package kernel for versions less than 6.6.35.1-4
2024-08-14 20:43:58
nessus
nessus
RHEL 9 : kpatch-patch-5_14_0-427_13_1 (RHSA-2024:5523)
2024-08-19 00:00:00
Amazon Linux 2 : kernel (ALASKERNEL-5.10-2024-063)
2024-07-11 00:00:00
RHEL 9 : kpatch-patch-5_14_0-284_48_1 and kpatch-patch-5_14_0-284_52_1 (RHSA-2024:5521)
2024-08-19 00:00:00
attackerkb
attackerkb
CVE-2024-36971
2024-06-10 00:00:00
virtuozzo
virtuozzo
[Important] [Security] Virtuozzo ReadyKernel Patch 169.0 for Virtuozzo Hybrid Server 7.5
2024-08-19 00:00:00
redhat
redhat
(RHSA-2024:5388) Important: kernel security update
2024-08-14 11:16:35
(RHSA-2024:5519) Important: kpatch-patch-4_18_0-305_120_1 security update
2024-08-19 00:59:28
(RHSA-2024:5521) Important: kpatch-patch-5_14_0-284_48_1 and kpatch-patch-5_14_0-284_52_1 security update
2024-08-19 00:59:31
cisa_kev
cisa_kev
Android Kernel Remote Code Execution Vulnerability
2024-08-07 00:00:00
cve
cve
CVE-2024-36971
2024-06-10 09:15:09
osv
osv
CVE-2024-36971
2024-06-10 09:15:00
Important: kernel security update
2024-08-21 14:53:21
linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-raspi, linux-xilinx-zynqmp vulnerabilities
2024-08-08 22:45:31
nvd
nvd
CVE-2024-36971
2024-06-10 09:15:09
ubuntucve
ubuntucve
CVE-2024-36971
2024-06-10 00:00:00
redhatcve
redhatcve
CVE-2024-36971
2024-06-14 04:12:59
vulnrichment
vulnrichment
CVE-2024-36971 net: fix __dst_negative_advice() race
2024-06-10 09:03:23
debiancve
debiancve
CVE-2024-36971
2024-06-10 09:15:09
malwarebytes
malwarebytes
Android vulnerability used in targeted attacks patched by Google
2024-08-06 13:47:58
cvelist
cvelist
CVE-2024-36971 net: fix __dst_negative_advice() race
2024-06-10 09:03:23
f5
f5
K000140987: Linux kernel vulnerability CVE-2024-36971
2024-09-06 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-3.0-0769
2024-06-28 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0640
2024-06-26 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0305
2024-06-27 00:00:00
amazon
amazon
Medium: kernel
2024-08-14 19:05:00
thn
thn
Google Patches New Android Kernel Vulnerability Exploited in the Wild
2024-08-06 06:12:00
redos
redos
ROS-20240819-01
2024-08-19 00:00:00
rocky
rocky
kernel security update
2024-08-21 14:53:21
kernel-rt security update
2024-08-21 14:52:36
kernel security update
2024-08-21 14:52:19
oraclelinux
oraclelinux
kernel security update
2024-08-14 00:00:00
Unbreakable Enterprise kernel security update
2024-08-12 00:00:00
Unbreakable Enterprise kernel-container security update
2024-08-12 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2024-08-08 00:00:00
Linux kernel (Azure) vulnerabilities
2024-08-19 00:00:00
Linux kernel (BlueField) vulnerabilities
2024-08-21 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6951-3)
2024-08-20 00:00:00
Ubuntu: Security Advisory (USN-6951-4)
2024-08-22 00:00:00
Ubuntu: Security Advisory (USN-6951-1)
2024-08-09 00:00:00

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

43.6%

JSON
Related for OSV:ASB-A-343727534
cbl_mariner2nessus71attackerkb1virtuozzo1redhat26cisa_kev1cve1osv22nvd1ubuntucve1redhatcve1vulnrichment1debiancve1malwarebytes1cvelist1f51photon3amazon1thn1redos1rocky4oraclelinux5ubuntu6openvas25