← CVE Radar
CVE-2024-50302HID: core: zero-initialize the report buffer
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
5.5 MEDIUMEPSS 0.81%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 5.5 | MEDIUM | 3.1NVD | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
CISA required action
⚡ Known exploited · remediation due Mar 25, 2025
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2024-50302
- Status
- Analyzed
- Assigner (CNA)
- Linux
- Published
- Nov 19, 2024
- Last modified
- 2026-10-15 01:19 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
LinuxLinux12 version ranges
- 27ce405039bfe6d3f4143415c638f56a3df77dca before e7ea60184e1e88a3c9e437b3265cbb6439aa7e26
- 27ce405039bfe6d3f4143415c638f56a3df77dca before 3f9e88f2672c4635960570ee9741778d4135ecf5
- 27ce405039bfe6d3f4143415c638f56a3df77dca before d7dc68d82ab3fcfc3f65322465da3d7031d4ab46
- 27ce405039bfe6d3f4143415c638f56a3df77dca before 05ade5d4337867929e7ef664e7ac8e0c734f1aaf
- 27ce405039bfe6d3f4143415c638f56a3df77dca before 1884ab3d22536a5c14b17c78c2ce76d1734e8b0b
- 27ce405039bfe6d3f4143415c638f56a3df77dca before 9d9f5c75c0c7f31766ec27d90f7a6ac673193191
- 27ce405039bfe6d3f4143415c638f56a3df77dca before 492015e6249fbcd42138b49de3c588d826dd9648
- 27ce405039bfe6d3f4143415c638f56a3df77dca before 177f25d1292c7e16e1199b39c85480f7f8815552
- b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7
- fe6c9b48ebc920ff21c10c50ab2729440c734254
- 3.10.16 before 3.11
- 3.11.5 before 3.12
LinuxLinux1 version range
- 3.12
References
- git.kernel.org https://git.kernel.org/stable/c/05ade5d4337867929e7ef664e7ac8e0c734f1aaf
- git.kernel.org https://git.kernel.org/stable/c/177f25d1292c7e16e1199b39c85480f7f8815552
- git.kernel.org https://git.kernel.org/stable/c/1884ab3d22536a5c14b17c78c2ce76d1734e8b0b
- git.kernel.org https://git.kernel.org/stable/c/3f9e88f2672c4635960570ee9741778d4135ecf5
- git.kernel.org https://git.kernel.org/stable/c/492015e6249fbcd42138b49de3c588d826dd9648
- git.kernel.org https://git.kernel.org/stable/c/9d9f5c75c0c7f31766ec27d90f7a6ac673193191
- git.kernel.org https://git.kernel.org/stable/c/d7dc68d82ab3fcfc3f65322465da3d7031d4ab46
- git.kernel.org https://git.kernel.org/stable/c/e7ea60184e1e88a3c9e437b3265cbb6439aa7e26
- lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- lists.debian.org https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
- cert-portal.siemens.com https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- cert-portal.siemens.com https://cert-portal.siemens.com/productcert/html/ssa-355557.html
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-50302