VulnRadar

Data against noise.

Built with NaN
Page generated: 11 Nov 2026, 08:02 UTC
← Dashboard

CVE-2024-36971

In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first clear sk->sk_dst_cache…

Read full description
In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first clear sk->sk_dst_cache, then call dst_release(old_dst). Note that sk_dst_reset(sk) is implementing this protocol correctly, while __dst_negative_advice() uses the wrong order. Given that ip6_negative_advice() has special logic against RTF_CACHE, this means each of the three ->negative_advice() existing methods must perform the sk_dst_reset() themselves. Note the check against NULL dst is centralized in __dst_negative_advice(), there is no need to duplicate it in various callbacks. Many thanks to Clement Lecigne for tracking this issue. This old bug became visible after the blamed commit, using UDP sockets.
CVSS 7.8 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
8.2/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 7.8: +1.17
  • Fresh EPSS: 2.70%: +0.01

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 11 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

Lookout
Press · 14 Aug 2024, 07:00 · A recently disclosed CVE in the Linux Kernel on Android devices | Threat Intel - Lookout
HotHardware
Press · 09 Aug 2024, 07:00 · Samsung Issues Critical Security Patch For Millions Of Galaxy Devices, Update ASAP - HotHardware
Bitdefender
Press · 07 Aug 2024, 07:00 · Google Quashes New Android Kernel Exploit with Urgent Patch - Bitdefender
Malwarebytes
Press · 06 Aug 2024, 07:00 · Android vulnerability used in targeted attacks patched by Google - Malwarebytes
Daily Express
Press · 06 Aug 2024, 07:00 · Google releases critical Android update - check your Galaxy phone now - Daily Express
See all 11 source documents
The Record from Recorded Future News
Press · 06 Aug 2024, 07:00 · Google says Android zero-day was exploited in the wild - The Record from Recorded Future News
The Hacker News
Press · 06 Aug 2024, 07:00 · Google Patches New Android Kernel Vulnerability Exploited in the Wild - The Hacker News
SecurityWeek
Press · 06 Aug 2024, 07:00 · Google Patches Android Zero-Day Exploited in Targeted Attacks - SecurityWeek
PCMag
Press · 06 Aug 2024, 07:00 · Google Patches Zero-Day Flaw in Android That Hackers Are Already Exploiting - PCMag
BleepingComputer
Press · 05 Aug 2024, 07:00 · Google fixes Android kernel zero-day exploited in targeted attacks - BleepingComputer
Hong Kong Computer Emergency Response Team Coordination Centre
Press · 29 Jul 2024, 07:00 · ChromeOS Multiple Vulnerabilities - Hong Kong Computer Emergency Response Team Coordination Centre

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.2 (2026-11-02 15:13). The curve appears once the score changes.

Public exploit evidence

1

Public exploit entries / repo candidates

See 1 repos with metrics
RepositoryStarsForksLanguageUpdated
M4G1XX/CVE-2024-3697122C14 Apr 2026, 19:04
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 7.8; EPSS 2.7%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
local access, low privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:59:14.725217+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Published
10 Jun 2024, 09:03
First press mention
29 Jul 2024, 07:00
Added to the CISA KEV catalog
07 Aug 2024, 00:00
Latest press mention
14 Aug 2024, 07:00
Score calculated
05 Nov 2026, 13:59
PoCs on GitHub
1 repositories
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar