CVE-2024-50302

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 0/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report.

CISA Known Exploited Vulnerability

Vendor / Product Linux — Kernel

Date Added 2025-03-04

Remediation Due 2025-03-25

This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://lore.kernel.org/linux-cve-announce/2024111908-CVE-2024-50302-f677@gregkh/ ; https://source.android.com/docs/security/bulletin/2025-03-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-50302

Weakness Classification (1)

CWE-908

Affected Software (17)

Vendor	Product	Version
debian	debian_linux	11.0
google	android	-
linux	linux_kernel	3.12 – 4.19.324
linux	linux_kernel	4.20 – 5.4.286
linux	linux_kernel	5.5 – 5.10.230
linux	linux_kernel	5.11 – 5.15.172
linux	linux_kernel	5.16 – 6.1.117
linux	linux_kernel	6.2 – 6.6.61
linux	linux_kernel	6.7 – 6.11.8
linux	linux_kernel	6.12
linux	linux_kernel	6.12
linux	linux_kernel	6.12
linux	linux_kernel	6.12
linux	linux_kernel	6.12
linux	linux_kernel	6.12
siemens	simatic_s7-1500_tm_mfp_firmware	-
siemens	sinec_os	< 3.2