CVE-2024-36971

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a weakness in the Linux kernel's network, specifically in the dst negative advice() function, which does not enforce proper RCU rules when sk->dst cache must be cleared, leading to possible use-after-free (UAF). This could allow remote code execution with system execution privileges needed, and user interaction is not required for exploitation. The vulnerability has been actively exploited in real-world scenarios, posing a severe risk to Android users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.