CVE-2024-50302 A-380395346 ASB-A-380395346
HID: core: zero-initialize the report buffer
- Severity
- 5.5 / 10
- Medium · CVSS 3.1
- Exploit chance (EPSS)
- 0.81%
- Chance of exploitation in the next 30 days. Higher than 56.95% of scored vulnerabilities.
- Known exploited
- Yes
- In CISA's catalog since Mar 4, 2025
- Weakness
- CWE-908 Use of Uninitialized Resource
- Fix
6.11.8- Upgrade Kernel to this version or later
Description
In the Linux kernel, the following vulnerability has been resolved:
HID: core: zero-initialize the report buffer
Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
Affected versions
Linux
| Package | Vulnerable | Fixed in |
|---|---|---|
| Kernel | >= 3.12.0, < 4.19.324>= 4.20.0, < 5.4.286>= 5.5.0, < 5.10.230>= 5.11.0, < 5.15.172>= 5.16.0, < 6.1.117>= 6.2.0, < 6.6.61>= 6.7.0, < 6.11.8 |
4.19.3245.4.2865.10.2305.15.1726.1.1176.6.616.11.8 |
How to fix
Move to the fixed version or later with your package manager, update the lockfile, and run your tests. If the package only arrives through another dependency, upgrade that dependency first. If none of its releases pulls a fixed version yet, force the version with your package manager's override.
Kernel Linux → 6.11.8
Set Kernel to 6.11.8 or later in your manifest.
Severity breakdown
CVSS 3.1 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Attack vector
- Local
- Attack complexity
- Low
- Privileges required
- Low
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Weakness
CWE-908: Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
How to prevent it
- Implementation: Explicitly initialize the resource before use. If this is performed through an API function or standard procedure, follow all required steps.
- Implementation: Pay close attention to complex conditionals that affect initialization, since some branches might not perform the initialization.
- Implementation: Avoid race conditions (CWE-362) during initialization routines.
- Build and Compilation: Run or compile the product with settings that generate warnings about uninitialized variables or data.
References
Advisories
Packages
Other links
- cert-portal.siemens.com/productcert/html/ssa-265688.html
- cert-portal.siemens.com/productcert/html/ssa-355557.html
- git.kernel.org/stable/c/05ade5d4337867929e7ef664e7ac8e0c734f1aaf
- git.kernel.org/stable/c/177f25d1292c7e16e1199b39c85480f7f8815552
- git.kernel.org/stable/c/1884ab3d22536a5c14b17c78c2ce76d1734e8b0b
- git.kernel.org/stable/c/3f9e88f2672c4635960570ee9741778d4135ecf5
- git.kernel.org/stable/c/492015e6249fbcd42138b49de3c588d826dd9648
- git.kernel.org/stable/c/9d9f5c75c0c7f31766ec27d90f7a6ac673193191
- git.kernel.org/stable/c/d7dc68d82ab3fcfc3f65322465da3d7031d4ab46
- git.kernel.org/stable/c/e7ea60184e1e88a3c9e437b3265cbb6439aa7e26
- lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- lists.debian.org/debian-lts-announce/2025/03/msg00002.html
- cisa.gov/known-exploited-vulnerabilities-catalog
Timeline
- Published
- Added to CISA's Known Exploited Vulnerabilities catalog
- Remediation due for U.S. federal agencies
- Last updated by the source
- Latest EPSS score
Related advisories
| Advisory | Severity | Why it's related |
|---|---|---|
| CVE-2026-53362 ipv6: account for fraggap on the paged allocation path | High Known exploited | Also affects Kernel |
| CVE-2026-53266 netfilter: bridge: make ebt_snat ARP rewrite writable | High Known exploited | Also affects Kernel |
| CVE-2026-46300 net: skbuff: preserve shared-frag marker during coalescing | High Known exploited | Also affects Kernel |
| CVE-2026-31431 crypto: algif_aead - Revert to operating out-of-place | High Known exploited | Also affects Kernel |
| CVE-2025-39964 crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg | Medium Known exploited | Also affects Kernel |
| CVE-2025-39682 tls: fix handling of zero-length records on the rx_list | Critical Known exploited | Also affects Kernel |
| CVE-2025-38352 posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() | High Known exploited | Also affects Kernel |
| CVE-2024-53197 ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices | High Known exploited | Also affects Kernel |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor