{"cve":{"cve_id":"CVE-2024-50302","is_kev":true,"kev_date_added":"2025-03-04","kev_vendor_project":"Linux","kev_product":"Kernel","kev_vulnerability_name":"Linux Kernel Use of Uninitialized Resource Vulnerability","kev_short_description":"The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report.","kev_required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","kev_due_date":"2025-03-25","kev_known_ransomware":false,"kev_notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://lore.kernel.org/linux-cve-announce/2024111908-CVE-2024-50302-f677@gregkh/ ; https://source.android.com/docs/security/bulletin/2025-03-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-50302","kev_cwes":["CWE-908"],"epss_score":0.00811,"epss_percentile":0.56073,"epss_as_of":"2026-10-15","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: core: zero-initialize the report buffer\n\nSince the report buffer is used by all kinds of drivers in various ways, let's\nzero-initialize it during allocation to make sure that it can't be ever used\nto leak kernel memory via specially-crafted report.","published_at":"2024-11-19T01:30:51.300000Z","last_modified_at":"2026-10-15T01:19:12.133000Z","cvss_v3_score":5.5,"cvss_v3_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_v3_severity":"MEDIUM","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":"active","ssvc_automatable":false,"ssvc_technical_impact":"partial","cwes":["CWE-908"],"nvd_references":["https://git.kernel.org/stable/c/e7ea60184e1e88a3c9e437b3265cbb6439aa7e26","https://git.kernel.org/stable/c/3f9e88f2672c4635960570ee9741778d4135ecf5","https://git.kernel.org/stable/c/d7dc68d82ab3fcfc3f65322465da3d7031d4ab46","https://git.kernel.org/stable/c/05ade5d4337867929e7ef664e7ac8e0c734f1aaf","https://git.kernel.org/stable/c/1884ab3d22536a5c14b17c78c2ce76d1734e8b0b","https://git.kernel.org/stable/c/9d9f5c75c0c7f31766ec27d90f7a6ac673193191","https://git.kernel.org/stable/c/492015e6249fbcd42138b49de3c588d826dd9648","https://git.kernel.org/stable/c/177f25d1292c7e16e1199b39c85480f7f8815552"],"vuln_status":"Analyzed","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:31.350578Z","updated_at":"2026-10-18T17:00:25.206287Z"},"effective_severity":"MEDIUM","badges":["kev"],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"L","value_label":"Local"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"L","value_label":"Low"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"N","value_label":"None"},{"metric":"A","name":"Availability","value":"N","value_label":"None"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"debian","vendor_name":"Debian","product_slug":"debian-linux","product_name":"debian_linux","version_start":"11.0","version_start_inclusive":true,"version_end":"11.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*"},{"vendor_slug":"google","vendor_name":"Google","product_slug":"android","product_name":"Android","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:o:google:android:-:*:*:*:*:*:*:*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"27ce405039bfe6d3f4143415c638f56a3df77dca","version_start_inclusive":true,"version_end":"d7dc68d82ab3fcfc3f65322465da3d7031d4ab46","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:27ce405039bfe6d3f4143415c638f56a3df77dca:d7dc68d82ab3fcfc3f65322465da3d7031d4ab46"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"27ce405039bfe6d3f4143415c638f56a3df77dca","version_start_inclusive":true,"version_end":"05ade5d4337867929e7ef664e7ac8e0c734f1aaf","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:27ce405039bfe6d3f4143415c638f56a3df77dca:05ade5d4337867929e7ef664e7ac8e0c734f1aaf"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"27ce405039bfe6d3f4143415c638f56a3df77dca","version_start_inclusive":true,"version_end":"1884ab3d22536a5c14b17c78c2ce76d1734e8b0b","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:27ce405039bfe6d3f4143415c638f56a3df77dca:1884ab3d22536a5c14b17c78c2ce76d1734e8b0b"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"27ce405039bfe6d3f4143415c638f56a3df77dca","version_start_inclusive":true,"version_end":"9d9f5c75c0c7f31766ec27d90f7a6ac673193191","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:27ce405039bfe6d3f4143415c638f56a3df77dca:9d9f5c75c0c7f31766ec27d90f7a6ac673193191"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"27ce405039bfe6d3f4143415c638f56a3df77dca","version_start_inclusive":true,"version_end":"492015e6249fbcd42138b49de3c588d826dd9648","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:27ce405039bfe6d3f4143415c638f56a3df77dca:492015e6249fbcd42138b49de3c588d826dd9648"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"27ce405039bfe6d3f4143415c638f56a3df77dca","version_start_inclusive":true,"version_end":"177f25d1292c7e16e1199b39c85480f7f8815552","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:27ce405039bfe6d3f4143415c638f56a3df77dca:177f25d1292c7e16e1199b39c85480f7f8815552"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7","version_start_inclusive":true,"version_end":"b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7:b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"fe6c9b48ebc920ff21c10c50ab2729440c734254","version_start_inclusive":true,"version_end":"fe6c9b48ebc920ff21c10c50ab2729440c734254","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:fe6c9b48ebc920ff21c10c50ab2729440c734254:fe6c9b48ebc920ff21c10c50ab2729440c734254"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"3.10.16","version_start_inclusive":true,"version_end":"3.11","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:3.10.16:3.11"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"3.11.5","version_start_inclusive":true,"version_end":"3.12","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:3.11.5:3.12"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"3.12","version_start_inclusive":true,"version_end":"3.12","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:3.12:3.12"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"0","version_start_inclusive":true,"version_end":"3.12","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:0:3.12"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"4.19.324","version_start_inclusive":true,"version_end":"4.19.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:4.19.324:4.19.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"5.4.286","version_start_inclusive":true,"version_end":"5.4.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:5.4.286:5.4.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"5.10.230","version_start_inclusive":true,"version_end":"5.10.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:5.10.230:5.10.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"5.15.172","version_start_inclusive":true,"version_end":"5.15.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:5.15.172:5.15.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"6.1.117","version_start_inclusive":true,"version_end":"6.1.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:6.1.117:6.1.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"6.6.61","version_start_inclusive":true,"version_end":"6.6.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:6.6.61:6.6.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"6.11.8","version_start_inclusive":true,"version_end":"6.11.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:6.11.8:6.11.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"6.12","version_start_inclusive":true,"version_end":"*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:6.12:*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"27ce405039bfe6d3f4143415c638f56a3df77dca","version_start_inclusive":true,"version_end":"e7ea60184e1e88a3c9e437b3265cbb6439aa7e26","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:27ce405039bfe6d3f4143415c638f56a3df77dca:e7ea60184e1e88a3c9e437b3265cbb6439aa7e26"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"27ce405039bfe6d3f4143415c638f56a3df77dca","version_start_inclusive":true,"version_end":"3f9e88f2672c4635960570ee9741778d4135ecf5","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:27ce405039bfe6d3f4143415c638f56a3df77dca:3f9e88f2672c4635960570ee9741778d4135ecf5"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux-kernel","product_name":"Linux kernel","version_start":"6.12","version_start_inclusive":true,"version_end":"6.12","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux-kernel","product_name":"Linux kernel","version_start":"6.12","version_start_inclusive":true,"version_end":"6.12","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux-kernel","product_name":"Linux kernel","version_start":"6.12","version_start_inclusive":true,"version_end":"6.12","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux-kernel","product_name":"Linux kernel","version_start":"3.12","version_start_inclusive":true,"version_end":"4.19.324","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux-kernel","product_name":"Linux kernel","version_start":"6.12","version_start_inclusive":true,"version_end":"6.12","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux-kernel","product_name":"Linux kernel","version_start":"6.12","version_start_inclusive":true,"version_end":"6.12","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux-kernel","product_name":"Linux kernel","version_start":"6.12","version_start_inclusive":true,"version_end":"6.12","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"simatic-s7-1500-tm-mfp-firmware","product_name":"simatic_s7-1500_tm_mfp_firmware","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:o:siemens:simatic_s7-1500_tm_mfp_firmware:-:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"sinec-os","product_name":"sinec_os","version_start":null,"version_start_inclusive":null,"version_end":"3.2","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:sinec_os:*:*:*:*:*:*:*:*"}],"exploit_refs":[],"news":[],"references":[{"url":"https://git.kernel.org/stable/c/e7ea60184e1e88a3c9e437b3265cbb6439aa7e26","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/3f9e88f2672c4635960570ee9741778d4135ecf5","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/d7dc68d82ab3fcfc3f65322465da3d7031d4ab46","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/05ade5d4337867929e7ef664e7ac8e0c734f1aaf","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/1884ab3d22536a5c14b17c78c2ce76d1734e8b0b","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/9d9f5c75c0c7f31766ec27d90f7a6ac673193191","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/492015e6249fbcd42138b49de3c588d826dd9648","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/177f25d1292c7e16e1199b39c85480f7f8815552","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2024-11-19T01:30:51.300000Z","label":"CVE published","source":null},{"type":"cisa_reported","at":"2025-03-04T00:00:00Z","label":"Added to CISA KEV catalog","source":"kev"},{"type":"cvss_changed","at":"2026-06-28T17:38:35.771937Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:38:35.771937Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:38:35.771937Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"ssvc_changed","at":"2026-06-29T02:12:50.098526Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T02:12:50.098526Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T02:12:50.098526Z","label":"SSVC decision revised","source":"vulnrichment"}]}