CVE-2024-36971—Android Kernel Remote Code Execution Vulnerability

Vulnerability Name

Android Kernel Remote Code Execution Vulnerability

Description

Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kernel and could impact other products, including but not limited to Android OS.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

• This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://source.android.com/docs/security/bulletin/2024-08-01, https://lore.kernel.org/linux-cve-announce/[email protected]/T/#u
• https://nvd.nist.gov/vuln/detail/CVE-2024-36971

Related News Articles

• CISA warns about actively exploited Apache OFBiz RCE flawAugust 8, 2024
• Google Patches New Android Kernel Vulnerability Exploited in the WildAugust 6, 2024
• Google fixes Android kernel zero-day exploited in targeted attacksAugust 5, 2024

Related Weaknesses

• CWE-416