[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffKz2UnTZPK3ycsr9CiUZUkJUxyF5WqLzinFwaB2v0-Q":3,"g5a-risk:CVE-2024-36971":202},{"success":4,"data":5,"meta":199},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":50,"references":51,"referencesCount":104,"weaknesses":105,"weaknessesCount":114,"isActivelyExploited":4,"cisaInfo":115,"otxData":26,"relatedBlogPosts":116,"seoMetadata":117,"configurations":142,"relatedVendorCves":183,"notableEvents":184},"CVE-2024-36971","What is CVE-2024-36971?","In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix __dst_negative_advice() race\n\n__dst_negative_advice() does not enforce proper RCU rules when\nsk->dst_cache must be cleared, leading to possible UAF.\n\nRCU rules are that we must first clear sk->sk_dst_cache,\nthen call dst_release(old_dst).\n\nNote that sk_dst_reset(sk) is implementing this protocol correctly,\nwhile __dst_negative_advice() uses the wrong order.\n\nGiven that ip6_negative_advice() has special logic\nagainst RTF_CACHE, this means each of the three ->negative_advice()\nexisting methods must perform the sk_dst_reset() themselves.\n\nNote the check against NULL dst is centralized in\n__dst_negative_advice(), there is no need to duplicate\nit in various callbacks.\n\nMany thanks to Clement Lecigne for tracking this issue.\n\nThis old bug became visible after the blamed commit, using UDP sockets.","In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU...","2024-06-10T09:15:09.127","2026-06-17T07:37:30.63",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":35},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],[],0.02701,[36,36,36,36,36,36,36],"High",[40,45],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"linux","linux_kernel","*","cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",2,[52,57,60,63,66,69,72,75,78,80,82,84,86,88,90,92,94,99],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F051c0bde9f0450a2ec3d62a86d2a0d2fad117f13","Kernel",[56],"Patch",{"url":58,"source":54,"tags":59},"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F2295a7ef5c8c49241bff769e7826ef2582e532a6",[56],{"url":61,"source":54,"tags":62},"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F5af198c387128a9d2ddd620b0f0803564a4d4508",[56],{"url":64,"source":54,"tags":65},"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F81dd3c82a456b0015461754be7cb2693991421b4",[56],{"url":67,"source":54,"tags":68},"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F92f1655aa2b2294d0b49925f3b875a634bd3b59e",[56],{"url":70,"source":54,"tags":71},"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Fb8af8e6118a6605f0e495a58d591ca94a85a50fc",[56],{"url":73,"source":54,"tags":74},"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Fdb0082825037794c5dba9959c9de13ca34cc5e72",[56],{"url":76,"source":54,"tags":77},"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Feacb8b195579c174a6d3e12a9690b206eb7f28cf",[56],{"url":53,"source":54,"tags":79},[56],{"url":58,"source":54,"tags":81},[56],{"url":61,"source":54,"tags":83},[56],{"url":64,"source":54,"tags":85},[56],{"url":67,"source":54,"tags":87},[56],{"url":70,"source":54,"tags":89},[56],{"url":73,"source":54,"tags":91},[56],{"url":76,"source":54,"tags":93},[56],{"url":95,"source":96,"tags":97},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F06\u002Fmsg00020.html","Debian",[98],"Mailing List",{"url":100,"source":101,"tags":102},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2024-36971","CISA",[103],"US Government Resource",18,[106],{"id":107,"name":108,"description":109,"extendedDescription":110,"status":111,"abstraction":112,"structure":113},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","","Stable","Variant","Simple",1,{"shortDescription":110,"requiredAction":110,"vulnerabilityName":110,"dateAdded":26},[],{"title":118,"metaDescription":119,"keywords":120,"canonicalUrl":121,"structuredData":122},"What is CVE-2024-36971? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-36971, a high severity cyber security vulnerability from 2024. In the Linux kernel, the following vulnerability has been r...","CVE-2024-36971, CVE-2024-36971 vulnerability, CVE-2024-36971 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, debian security, linux security, debian_linux vulnerability, linux_kernel vulnerability","\u002Fwhat-is\u002Fcve-2024-36971",{"@context":123,"@type":124,"headline":118,"description":119,"datePublished":10,"dateModified":11,"author":125,"publisher":129,"about":133,"mainEntityOfPage":137,"articleSection":140,"keywords":141},"https:\u002F\u002Fschema.org","TechArticle",{"@type":126,"name":127,"url":128},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":126,"name":127,"url":128,"logo":130},{"@type":131,"url":132},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":134,"name":6,"description":135,"additionalType":136},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":138,"@id":139},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-36971","Cybersecurity","CVE-2024-36971, CVE-2024-36971 vulnerability, CVE-2024-36971 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[143,151],{"Operator":26,"Negate":26,"Nodes":144},[145],{"Operator":146,"Negate":147,"CPEMatch":148},"OR",false,[149],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":150,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Operator":26,"Negate":26,"Nodes":152},[153],{"Operator":146,"Negate":147,"CPEMatch":154},[155,159,163,167,171,175,179],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":156,"VersionStartExcluding":26,"VersionStartIncluding":157,"VersionEndExcluding":158,"VersionEndIncluding":26},"4A293D74-EB53-4BBF-86BD-0569A72A4192","4.6","4.19.316",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":160,"VersionStartExcluding":26,"VersionStartIncluding":161,"VersionEndExcluding":162,"VersionEndIncluding":26},"7FDBF235-DA18-49A1-8690-6C7272FD0701","4.20","5.4.278",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":164,"VersionStartExcluding":26,"VersionStartIncluding":165,"VersionEndExcluding":166,"VersionEndIncluding":26},"E9063AF3-D593-43B7-810D-58B87F82F9F9","5.5","5.10.219",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":168,"VersionStartExcluding":26,"VersionStartIncluding":169,"VersionEndExcluding":170,"VersionEndIncluding":26},"31130639-53FE-4726-8986-434EE2528CB2","5.11","5.15.161",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":172,"VersionStartExcluding":26,"VersionStartIncluding":173,"VersionEndExcluding":174,"VersionEndIncluding":26},"9D20DE32-76F8-4E4C-A8DF-5B53082D18E5","5.16","6.1.94",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":176,"VersionStartExcluding":26,"VersionStartIncluding":177,"VersionEndExcluding":178,"VersionEndIncluding":26},"6BD9DCFD-0342-4039-B8CE-70F26DB7173B","6.2","6.6.34",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":180,"VersionStartExcluding":26,"VersionStartIncluding":181,"VersionEndExcluding":182,"VersionEndIncluding":26},"991B9791-966A-4D18-9E8D-A8AB128E5627","6.7","6.9.4",[],[185,192],{"id":186,"eventType":187,"eventTime":188,"details":189,"label":190,"color":191},"9f368e95-ee12-4b1b-803c-8db97ab6b58c","HIGH_EPSS_DELTA","2025-11-19T04:04:40.758099+00:00","Daily EPSS score increased by 0.160 on 2024-06-12","EPSS Score Increased","red",{"id":193,"eventType":194,"eventTime":195,"details":196,"label":197,"color":198},"89459080-c247-48a2-aea6-a5d957dbb3c1","LOW_EPSS_DELTA","2025-11-22T04:04:29.1817+00:00","Daily EPSS score decreased by 0.158 on 2024-06-12","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":200,"version":201},1793284991377,"2.0",{"score":203,"band":38,"action":204,"scoredAt":205},75,"Emergency patch","2026-10-29T07:01:16.591697+00:00"]