MEDIUMCVSS 5.5KNOWN EXPLOITED

CVE-2024-50302

CVE-2024-50302 updated by NVD

Published: 2025-03-04
Modified: 2026-11-04
Sources: cisa-kev, nvd

Summary

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-50302

Includes data from the CISA Known Exploited Vulnerabilities catalog.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.