5.5
Medium
CVE-2024-50302 Linux Kernel Use of Uninitialized Resource Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Ransomware campaigns
Not observed so far
Weakness
CWE-908
Description
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux 6.12 | earliest → < 6.12 | 6.12 |
| Linux 6.11 | earliest → < 6.11.8 | 6.11.8 |
| Linux 6.6 | earliest → < 6.6.61 | 6.6.61 |
| Linux 6.1 | earliest → < 6.1.117 | 6.1.117 |
| Linux 5.15 | earliest → < 5.15.172 | 5.15.172 |
| Linux 5.10 | earliest → < 5.10.230 | 5.10.230 |
| Linux 5.4 | earliest → < 5.4.286 | 5.4.286 |
| Linux 4.19 | earliest → < 4.19.324 | 4.19.324 |
| Linux | 3.12 | No fix stated |
Show the 4 other branches Hide the 4 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| RUGGEDCOM RST2428P | Versions not published | |
| SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family | Versions not published | |
| SCALANCE XCM-/XRM-/XCH-/XRH-300 family | Versions not published | |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | earliest → < 1.1.1 | 1.1.1 |
Other CVEs of Linux
The 18300 CVEs of Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Not rated
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Not rated
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Not rated
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Not rated