QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-50302

Back to search

CVE-2024-50302

Published: Nov 19, 2024

Modified: May 23, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.

VendorProductVersions

Linux

Linux

affected
27ce405039bfe6d3f4143415c638f56a3df77dca - < e7ea60184e1e88a3c9e437b3265cbb6439aa7e26
affected
27ce405039bfe6d3f4143415c638f56a3df77dca - < 3f9e88f2672c4635960570ee9741778d4135ecf5
affected
27ce405039bfe6d3f4143415c638f56a3df77dca - < d7dc68d82ab3fcfc3f65322465da3d7031d4ab46
affected
27ce405039bfe6d3f4143415c638f56a3df77dca - < 05ade5d4337867929e7ef664e7ac8e0c734f1aaf
affected
27ce405039bfe6d3f4143415c638f56a3df77dca - < 1884ab3d22536a5c14b17c78c2ce76d1734e8b0b

+7 more versions

Linux

Linux

affected
3.12
unaffected
0 - < 3.12
unaffected
4.19.324 - <= 4.19.*
unaffected
5.4.286 - <= 5.4.*
unaffected
5.10.230 - <= 5.10.*

+5 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now