CVE-2024-36921

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-36921", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-30T15:25:07.068Z", "datePublished": "2024-05-30T15:29:15.696Z", "dateUpdated": "2026-08-05T11:32:05.044Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T11:32:05.044Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: guard against invalid STA ID on removal\n\nGuard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would\nresult in out-of-bounds array accesses. This prevents issues should the\ndriver get into a bad state during error handling."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:A - The defect is in the iwlwifi mvm 802.11mc FTM responder / PASN secure-ranging path, exercised on an AP-mode interface in response to nearby stations performing ranging and on firmware-restart handling that an adjacent peer can provoke. Wi-Fi driver reachability is Adjacent, consistent with other iwlwifi mvm CVEs.\nAC:L - Reaching the invalid-STA-ID removal requires the driver to be in an error/teardown state, but an adjacent attacker can drive repeated PASN responder add/remove churn and induce firmware command failures and FW restarts, so the triggering conditions are within attacker influence rather than beyond it.\nPR:N - PASN ranging is negotiated with unassociated peers before any credentials are established, so an adjacent 802.11 device needs no account or privilege on the target; FTM responder mode being enabled is an environmental precondition, not an attacker privilege.\nUI:N - The FTM responder teardown and firmware-restart paths run autonomously in the driver; no action by a local user or administrator is needed once the responder is configured.\nS:U - The out-of-bounds accesses corrupt memory inside the kernel's own iwlwifi driver state, staying entirely within the kernel security authority with no crossing into a hypervisor, IOMMU, or sandbox boundary.\nC:H - The bug performs an out-of-bounds read of fw_id_to_mac_id[0xFF] and two out-of-bounds writes that silently corrupt live struct iwl_mvm state adjacent to the RCU firmware-station tables; such kernel memory corruption around pointer tables is leverageable toward disclosure of kernel memory.\nI:H - Two out-of-bounds writes zero 8 bytes each ~2 KB past the fw_id_to_mac_id and fw_id_to_link_sta arrays, overwriting unrelated live driver fields inside struct iwl_mvm, and an invalid station ID is fed to firmware \u2014 an out-of-bounds write is a memory-corruption integrity impact.\nA:H - Nulling arbitrary driver fields leads to later NULL dereferences and oopses, the stale OOB-read value causes a STA_REMOVE_CMD with sta_id 0xFF to be sent to firmware which can assert and force a device reset, and the post-fix WARN_ON confirms this is a fatal-state condition."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c"], "versions": [{"version": "006c152ac9e56ac7871efa995854c3ff8cf6915a", "lessThan": "94f80a8ec15e238b78521f20f8afaed60521a294", "status": "affected", "versionType": "git"}, {"version": "006c152ac9e56ac7871efa995854c3ff8cf6915a", "lessThan": "fab21d220017daa5fd8a3d788ff25ccfecfaae2f", "status": "affected", "versionType": "git"}, {"version": "006c152ac9e56ac7871efa995854c3ff8cf6915a", "lessThan": "17f64517bf5c26af56b6c3566273aad6646c3c4f", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c"], "versions": [{"version": "6.4", "status": "affected"}, {"version": "0", "lessThan": "6.4", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.31", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8.10", "lessThanOrEqual": "6.8.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.9", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.6.31"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.8.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.9"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/94f80a8ec15e238b78521f20f8afaed60521a294"}, {"url": "https://git.kernel.org/stable/c/fab21d220017daa5fd8a3d788ff25ccfecfaae2f"}, {"url": "https://git.kernel.org/stable/c/17f64517bf5c26af56b6c3566273aad6646c3c4f"}], "title": "wifi: iwlwifi: mvm: guard against invalid STA ID on removal", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:43:49.860Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/94f80a8ec15e238b78521f20f8afaed60521a294", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/fab21d220017daa5fd8a3d788ff25ccfecfaae2f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/17f64517bf5c26af56b6c3566273aad6646c3c4f", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-36921", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T17:16:04.083562Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:35:00.174Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/94f80a8ec15e238b78521f20f8afaed60521a294", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/fab21d220017daa5fd8a3d788ff25ccfecfaae2f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/17f64517bf5c26af56b6c3566273aad6646c3c4f", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:43:49.860Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-36921", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T17:16:04.083562Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:27.410Z"}}], "cna": {"title": "wifi: iwlwifi: mvm: guard against invalid STA ID on removal", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:A - The defect is in the iwlwifi mvm 802.11mc FTM responder / PASN secure-ranging path, exercised on an AP-mode interface in response to nearby stations performing ranging and on firmware-restart handling that an adjacent peer can provoke. Wi-Fi driver reachability is Adjacent, consistent with other iwlwifi mvm CVEs.\nAC:L - Reaching the invalid-STA-ID removal requires the driver to be in an error/teardown state, but an adjacent attacker can drive repeated PASN responder add/remove churn and induce firmware command failures and FW restarts, so the triggering conditions are within attacker influence rather than beyond it.\nPR:N - PASN ranging is negotiated with unassociated peers before any credentials are established, so an adjacent 802.11 device needs no account or privilege on the target; FTM responder mode being enabled is an environmental precondition, not an attacker privilege.\nUI:N - The FTM responder teardown and firmware-restart paths run autonomously in the driver; no action by a local user or administrator is needed once the responder is configured.\nS:U - The out-of-bounds accesses corrupt memory inside the kernel's own iwlwifi driver state, staying entirely within the kernel security authority with no crossing into a hypervisor, IOMMU, or sandbox boundary.\nC:H - The bug performs an out-of-bounds read of fw_id_to_mac_id[0xFF] and two out-of-bounds writes that silently corrupt live struct iwl_mvm state adjacent to the RCU firmware-station tables; such kernel memory corruption around pointer tables is leverageable toward disclosure of kernel memory.\nI:H - Two out-of-bounds writes zero 8 bytes each ~2 KB past the fw_id_to_mac_id and fw_id_to_link_sta arrays, overwriting unrelated live driver fields inside struct iwl_mvm, and an invalid station ID is fed to firmware \u2014 an out-of-bounds write is a memory-corruption integrity impact.\nA:H - Nulling arbitrary driver fields leads to later NULL dereferences and oopses, the stale OOB-read value causes a STA_REMOVE_CMD with sta_id 0xFF to be sent to firmware which can assert and force a device reset, and the post-fix WARN_ON confirms this is a fatal-state condition."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "006c152ac9e56ac7871efa995854c3ff8cf6915a", "lessThan": "94f80a8ec15e238b78521f20f8afaed60521a294", "versionType": "git"}, {"status": "affected", "version": "006c152ac9e56ac7871efa995854c3ff8cf6915a", "lessThan": "fab21d220017daa5fd8a3d788ff25ccfecfaae2f", "versionType": "git"}, {"status": "affected", "version": "006c152ac9e56ac7871efa995854c3ff8cf6915a", "lessThan": "17f64517bf5c26af56b6c3566273aad6646c3c4f", "versionType": "git"}], "programFiles": ["drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.4"}, {"status": "unaffected", "version": "0", "lessThan": "6.4", "versionType": "semver"}, {"status": "unaffected", "version": "6.6.31", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.8.10", "versionType": "semver", "lessThanOrEqual": "6.8.*"}, {"status": "unaffected", "version": "6.9", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/94f80a8ec15e238b78521f20f8afaed60521a294"}, {"url": "https://git.kernel.org/stable/c/fab21d220017daa5fd8a3d788ff25ccfecfaae2f"}, {"url": "https://git.kernel.org/stable/c/17f64517bf5c26af56b6c3566273aad6646c3c4f"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: guard against invalid STA ID on removal\n\nGuard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would\nresult in out-of-bounds array accesses. This prevents issues should the\ndriver get into a bad state during error handling."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.31", "versionStartIncluding": "6.4"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.8.10", "versionStartIncluding": "6.4"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.9", "versionStartIncluding": "6.4"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T11:32:05.044Z"}}}, "cveMetadata": {"cveId": "CVE-2024-36921", "state": "PUBLISHED", "dateUpdated": "2026-08-05T11:32:05.044Z", "dateReserved": "2024-05-30T15:25:07.068Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-30T15:29:15.696Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "94f80a8ec15e238b78521f20f8afaed60521a294", "status": "affected", "version": "006c152ac9e56ac7871efa995854c3ff8cf6915a", "versionType": "git"}, {"lessThan": "fab21d220017daa5fd8a3d788ff25ccfecfaae2f", "status": "affected", "version": "006c152ac9e56ac7871efa995854c3ff8cf6915a", "versionType": "git"}, {"lessThan": "17f64517bf5c26af56b6c3566273aad6646c3c4f", "status": "affected", "version": "006c152ac9e56ac7871efa995854c3ff8cf6915a", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.4"}, {"lessThan": "6.4", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.31", "versionType": "semver"}, {"lessThanOrEqual": "6.8.*", "status": "unaffected", "version": "6.8.10", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.9", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E3E590E3-9122-405E-A816-1B69540EC77D", "versionEndExcluding": "6.6.31", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "6A6B920C-8D8F-4130-86B4-AD334F4CF2E3", "versionEndExcluding": "6.8.10", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*", "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: guard against invalid STA ID on removal\n\nGuard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would\nresult in out-of-bounds array accesses. This prevents issues should the\ndriver get into a bad state during error handling."}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: wifi: iwlwifi: mvm: proteger contra ID de STA no v\u00e1lido al eliminarlo Proteger contra ID de estaci\u00f3n no v\u00e1lidos en iwl_mvm_mld_rm_sta_id ya que eso dar\u00eda como resultado accesos a la matriz fuera de los l\u00edmites. Esto evita problemas en caso de que el controlador entre en mal estado durante el manejo de errores."}], "id": "CVE-2024-36921", "lastModified": "2026-08-04T11:18:31.607", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-36921", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-09-10T17:16:04.083562Z", "version": "2.0.3"}}]}, "published": "2024-05-30T16:15:15.397", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/17f64517bf5c26af56b6c3566273aad6646c3c4f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/94f80a8ec15e238b78521f20f8afaed60521a294"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/fab21d220017daa5fd8a3d788ff25ccfecfaae2f"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/17f64517bf5c26af56b6c3566273aad6646c3c4f"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/94f80a8ec15e238b78521f20f8afaed60521a294"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/fab21d220017daa5fd8a3d788ff25ccfecfaae2f"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-129"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2024:5102", "cpe": "cpe:/a:redhat:enterprise_linux:8::nfv", "package": "kernel-rt-0:4.18.0-553.16.1.rt7.357.el8_10", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2024-08-08T00:00:00Z"}, {"advisory": "RHSA-2024:5101", "cpe": "cpe:/o:redhat:enterprise_linux:8", "package": "kernel-0:4.18.0-553.16.1.el8_10", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2024-08-08T00:00:00Z"}, {"advisory": "RHSA-2024:5363", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "kernel-0:5.14.0-427.31.1.el9_4", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2024-08-15T00:00:00Z"}, {"advisory": "RHSA-2024:5363", "cpe": "cpe:/o:redhat:enterprise_linux:9", "package": "kernel-0:5.14.0-427.31.1.el9_4", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2024-08-15T00:00:00Z"}], "bugzilla": {"description": "kernel: wifi: iwlwifi: mvm: guard against invalid STA ID on removal", "id": "2284513", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2284513"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.7", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "status": "verified"}, "cwe": "CWE-125", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nwifi: iwlwifi: mvm: guard against invalid STA ID on removal\nGuard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would\nresult in out-of-bounds array accesses. This prevents issues should the\ndriver get into a bad state during error handling.", "An out-of-bounds memory access flaw was found in the Linux kernel\u2019s Wireless WiFi Link Next-Gen AGN driver in how a user removes it. This flaw allows a local user to crash or potentially escalate their privileges on the system."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2024-36921", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-05-30T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-36921\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-36921\nhttps://lore.kernel.org/linux-cve-announce/2024053039-CVE-2024-36921-9f90@gregkh/T"], "threat_severity": "Moderate"}

{}