CVE-2024-50302

Linux Kernel Use of Uninitialized Resource Vulnerability

Android

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.

19. Nov 2024

Ausgewertete Quellen

• Debian
  https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
• Debian
  https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
• Hinweis
  https://cert-portal.siemens.com/productcert/html/ssa-265688.html
• Hinweis
  https://cert-portal.siemens.com/productcert/html/ssa-355557.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-50302
• CISA
  Linux Kernel Use of Uninitialized Resource Vulnerability
• NVD
  CVE-2024-50302