CVE-2024-50302KEV · OVERDUECWE-908

Linux Kernel Use of Uninitialized Resource Vulnerability

Medium · published November 19, 2024

Patch now

The score understates this — it's already being exploited

CVSS calls it medium at 5.5. It is confirmed in active exploitation. It sits in the 56.5th percentile for exploit probability.

578
days past CISA
deadline
CVSS v3.1
5.5
EPSS
1%
Percentile
56.5
In the wild
Confirmed
What it is

⚠️ A crafty report buffer could be your kernel's Achilles' heel! This vulnerability allows specially-crafted reports to potentially leak sensitive memory. 🔍 Think of the report buffer as a shared notepad in a busy office. If it isn't wiped clean after use, the next person might accidentally read confidential notes left behind by the previous occupant, leading to some serious mix-ups! An attacker could exploit this vulnerability to access sensitive kernel memory, risking data leakage that could compromise system integrity. While the exploit requires specific conditions, the consequences could be a headache for any system administrator, making it important to address.

Put simply

Think of the report buffer as a shared notepad in a busy office. If it isn't wiped clean after use, the next person might accidentally read confidential notes left behind by the previous occupant, leading to some serious mix-ups! This vulnerability in the Linux kernel's HID core results from the report buffer not being zero-initialized during allocation, allowing potential leakage of kernel memory via specially-crafted reports.

What to do

An attacker could exploit this vulnerability to access sensitive kernel memory, risking data leakage that could compromise system integrity. While the exploit requires specific conditions, the consequences could be a headache for any system administrator, making it important to address. Update the Linux kernel to the latest version that resolves this issue, ensuring that the report buffer is zero-initialized during allocation. Regularly audit your kernel versions to prevent exploitation. 🛡️ You've got this! With these steps, you'll be back in control and keeping your systems secure! 💪✨

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00811 · 56.5th percentile
Weakness
CWE-908 · Use of Uninitialized Resource
Published
2024-11-19T07:16Z
KEV added
2025-03-04 · due 2025-03-25
Affected products (17)
ProductVersionsFixed in
google/androidall versions—
debian/debian_linuxall versions—
siemens/simatic_s7-1500_tm_mfp_firmwareall versions—
siemens/sinec_os< 3.23.2
linux/linux_kernel≥ 3.12, < 4.19.3244.19.324
linux/linux_kernel≥ 4.20, < 5.4.2865.4.286
linux/linux_kernel≥ 5.5, < 5.10.2305.10.230
linux/linux_kernel≥ 5.11, < 5.15.1725.15.172
linux/linux_kernel≥ 5.16, < 6.1.1176.1.117
linux/linux_kernel≥ 6.2, < 6.6.616.6.61
linux/linux_kernel≥ 6.7, < 6.11.86.11.8
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (13)
EPSS history
Timeline
  • 04 MAR 00:00Z
    Added to CISA KEV — remediate by Mar 25
    kev
  • 19 NOV 01:30Z
    HID: core: zero-initialize the report buffer
    cvelistv5