Medium severity5.5CISA KEVNVD Advisory· Published Nov 19, 2024· Updated May 12, 2026
CVE-2024-50302
CVE-2024-50302
Description
In the Linux kernel, the following vulnerability has been resolved:
HID: core: zero-initialize the report buffer
Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
Affected products
1- Linux/Linuxv5Range: 3.12
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- cert-portal.siemens.com/productcert/html/ssa-265688.htmlnvdThird Party Advisory
- cert-portal.siemens.com/productcert/html/ssa-355557.htmlnvdThird Party Advisory
- lists.debian.org/debian-lts-announce/2025/01/msg00001.htmlnvdMailing List
- lists.debian.org/debian-lts-announce/2025/03/msg00002.htmlnvdMailing List
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
1- Critical Remote Code Execution Vulnerability Patched in AndroidSecurityWeek · May 5, 2026