Skip to content
Heist/ feed
Unrated

HID: core: zero-initialize the report buffer

Type: advisorySource: Official CVE ListKnown exploited1 source record

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.

Announced Source revision 1
Original source ↗

CVE-2024-50302

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2024-50302

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "27ce405039bfe6d3f4143415c638f56a3df77dca",
        "lessThan": "e7ea60184e1e88a3c9e437b3265cbb6439aa7e26",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "27ce405039bfe6d3f4143415c638f56a3df77dca",
        "lessThan": "3f9e88f2672c4635960570ee9741778d4135ecf5",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "27ce405039bfe6d3f4143415c638f56a3df77dca",
        "lessThan": "d7dc68d82ab3fcfc3f65322465da3d7031d4ab46",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "27ce405039bfe6d3f4143415c638f56a3df77dca",
        "lessThan": "05ade5d4337867929e7ef664e7ac8e0c734f1aaf",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "27ce405039bfe6d3f4143415c638f56a3df77dca",
        "lessThan": "1884ab3d22536a5c14b17c78c2ce76d1734e8b0b",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "27ce405039bfe6d3f4143415c638f56a3df77dca",
        "lessThan": "9d9f5c75c0c7f31766ec27d90f7a6ac673193191",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "27ce405039bfe6d3f4143415c638f56a3df77dca",
        "lessThan": "492015e6249fbcd42138b49de3c588d826dd9648",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "27ce405039bfe6d3f4143415c638f56a3df77dca",
        "lessThan": "177f25d1292c7e16e1199b39c85480f7f8815552",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "fe6c9b48ebc920ff21c10c50ab2729440c734254",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "3.10.16",
        "lessThan": "3.11",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "3.11.5",
        "lessThan": "3.12",
        "versionType": "semver"
      }
    ],
    "programFiles": [
      "drivers/hid/hid-core.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "3.12"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "3.12",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "4.19.324",
        "versionType": "semver",
        "lessThanOrEqual": "4.19.*"
      },
      {
        "status": "unaffected",
        "version": "5.4.286",
        "versionType": "semver",
        "lessThanOrEqual": "5.4.*"
      },
      {
        "status": "unaffected",
        "version": "5.10.230",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.172",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.117",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.61",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.11.8",
        "versionType": "semver",
        "lessThanOrEqual": "6.11.*"
      },
      {
        "status": "unaffected",
        "version": "6.12",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/hid/hid-core.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2024-50302

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Linked CVE context

These ratings describe the referenced vulnerabilities and products. They are not a severity rating for every application using this dependency.

CVE-2024-50302 · Unrated

Kernel · Known exploited (CISA KEV)

Event
#26803 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement