{"id":"CVE-2024-50302","kind":"vulnerability","aliases":["CVE-2024-50302"],"related":[],"title":"In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer…","description":"The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report.\n\nCISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","summary":"The Linux kernel uses an uninitialized resource when handling certain HID (Human Interface Device) reports. A local attacker who can supply a crafted HID report can leak kernel memory.","severity":"medium","cvss":5.5,"epss":null,"exploited":true,"exploited_at":"2025-03-04T00:00:00+00:00","products":[{"name":"google android","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"debian linux","fixed":[],"affected":"= 11.0","ecosystem":"vendor"},{"name":"siemens simatic s7-1500 tm mfp firmware","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"siemens sinec os","fixed":["3.2"],"affected":"< 3.2","ecosystem":"vendor"},{"name":"linux kernel","fixed":["4.19.324"],"affected":">= 3.12, < 4.19.324","ecosystem":"vendor"},{"name":"linux kernel","fixed":["5.4.286"],"affected":">= 4.20, < 5.4.286","ecosystem":"vendor"},{"name":"linux kernel","fixed":["5.10.230"],"affected":">= 5.5, < 5.10.230","ecosystem":"vendor"},{"name":"linux kernel","fixed":["5.15.172"],"affected":">= 5.11, < 5.15.172","ecosystem":"vendor"},{"name":"linux kernel","fixed":["6.1.117"],"affected":">= 5.16, < 6.1.117","ecosystem":"vendor"},{"name":"linux kernel","fixed":["6.6.61"],"affected":">= 6.2, < 6.6.61","ecosystem":"vendor"},{"name":"linux kernel","fixed":["6.11.8"],"affected":">= 6.7, < 6.11.8","ecosystem":"vendor"},{"name":"linux kernel","fixed":[],"affected":"= 6.12","ecosystem":"vendor"},{"name":"Linux Kernel","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","infrastructure","kernel","linux","self-hosted"],"not_affected_if":["no-hid-devices-exposed"],"how_to_check":null,"fix":"Apply the vendor kernel update that fixes CVE-2024-50302; the sources do not name the fixed kernel version.","status":"open","published_at":"2024-11-19T02:16:32+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:52:17+00:00","updated_at":"2026-10-24T00:09:50+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-23T20:52:17Z","model":"claude-haiku-5-5","output":{"fix":"Apply the vendor kernel update that fixes CVE-2024-50302; the sources do not name the fixed kernel version.","reach":"local","impact":"low","summary":"The Linux kernel uses an uninitialized resource when handling certain HID (Human Interface Device) reports. A local attacker who can supply a crafted HID report can leak kernel memory.","category":"infrastructure","who_cares":["linux","kernel","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker reads kernel memory, possibly leaking secrets or aiding further exploitation.","analyst_note":"Listed as exploited in the wild by CISA KEV; find the fixed kernel versions and distro advisories, and confirm whether USB/HID input is required, at https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-50302","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["no-hid-devices-exposed"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000466,"input_tokens":2643,"output_tokens":404,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-01':129C '-1500':32A '-2024':20A,23A '-50302':21A,24A '22':128C 'action':119C 'allow':104C 'android':26A 'appli':120C 'applic':126C 'attack':81B,106C 'bod':127C 'buffer':18A 'certain':73B 'cisa':117C 'cloud':132C 'contain':96C 'core':12A 'craft':86B,114C 'cve':19A,22A 'debian':27A 'devic':77B 'discontinu':135C 'exploit':57B 'firmware':35A 'follow':6A,125C 'google':25A 'guidanc':130C 'handl':72B 'hid':11A,74B,87B,115C 'host':63B 'human':75B 'infrastructur':58B 'initi':15A 'instruct':124C 'interfac':76B 'kernel':4A,40A,42A,44A,46A,48A,50A,52A,54A,56A,59B,66B,91B,95C,109C 'leak':90B,108C 'linux':3A,28A,39A,41A,43A,45A,47A,49A,51A,53A,55A,60B,65B,94C 'local':80B 'memori':92B,110C 'mfp':34A 'mitig':121C,141C 'os':38A 'per':122C 'product':139C 'report':17A,78B,88B,116C 'requir':118C 'resolv':10A 'resourc':70B,101C 's7':31A 'self':62B 'self-host':61B 'servic':133C 'siemens':29A,36A 'simatic':30A 'sinec':37A 'special':113C 'suppli':84B 'tm':33A 'unavail':143C 'uniniti':69B,100C 'use':67B,98C,136C 'vendor':123C 'via':111C 'vulner':7A,102C 'zero':14A 'zero-initi':13A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2024-11-19T02:16:32+00:00","kev":{"dateAdded":"2025-03-04","dueDate":"2025-03-25","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2024-50302","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-50302","severity":null,"published_at":"2025-03-04T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T12:39:22+00:00","note":null},{"source":"nvd","external_id":"CVE-2024-50302","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50302","severity":null,"published_at":"2024-11-19T02:16:32+00:00","modified_at":"2026-10-15T01:19:12+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}