5.5
Moyenne
Exploitée
CVE-2024-50302 Linux Kernel Use of Uninitialized Resource Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-908
Description
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux 6.12 | premières → < 6.12 | 6.12 |
| Linux 6.11 | premières → < 6.11.8 | 6.11.8 |
| Linux 6.6 | premières → < 6.6.61 | 6.6.61 |
| Linux 6.1 | premières → < 6.1.117 | 6.1.117 |
| Linux 5.15 | premières → < 5.15.172 | 5.15.172 |
| Linux 5.10 | premières → < 5.10.230 | 5.10.230 |
| Linux 5.4 | premières → < 5.4.286 | 5.4.286 |
| Linux 4.19 | premières → < 4.19.324 | 4.19.324 |
| Linux | 3.12 | Pas de correctif indiqué |
Afficher les 4 autres branches Masquer les 4 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RUGGEDCOM RST2428P | Versions non publiées | |
| SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family | Versions non publiées | |
| SCALANCE XCM-/XRM-/XCH-/XRH-300 family | Versions non publiées | |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | premières → < 1.1.1 | 1.1.1 |
Références
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de Linux
Les 18283 CVE de Linux →
CVE-2026-99270
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix potential UAF in reqsk_timer_handler()
8.1
Élevée
CVE-2026-99269
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before…
7.8
Élevée
CVE-2026-99261
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for…
Non notée
CVE-2026-99260
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags…
Non notée