CVE-2024-50302: Linux Kernel Use of Uninitialized Resource Vulnerability
HID: core: zero-initialize the report buffer
Other sources
The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report.
— CISA
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-50302?
CVE-2024-50302 has been classified as a vulnerability that could potentially lead to information leakage.
How do I fix CVE-2024-50302?
To mitigate CVE-2024-50302, update the Linux kernel to a version that has addressed this vulnerability.
What versions of the Linux kernel are affected by CVE-2024-50302?
CVE-2024-50302 affects multiple versions of the Linux kernel from 3.12 up to 6.12-rc6.
What components are impacted by CVE-2024-50302?
CVE-2024-50302 impacts the input HID subsystem of the Linux kernel, particularly around the report buffer.
Is CVE-2024-50302 exploitable remotely?
CVE-2024-50302 is not directly stated as being exploitable remotely, but it poses a risk of local information leakage.