All vulnerabilities
CVE-2024-50302

Linux Kernel Use of Uninitialized Resource Vulnerability

Linux KernelOperating systems
Open in ThreatlineRecord JSON
CVSS
5.5Medium
ExploitationExploited in the wildAdded to KEV 4 Mar 2025CISA KEV
Exploit odds (EPSS)0.81%Chance of exploitation activity in the next 30 days, higher than 56% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in3f9e88f2672c4635960570ee9741778d4135ecf5Also 05ade5d4337867929e7ef664e7ac8e0c734f1aaf, 1884ab3d22536a5c14b17c78c2ce76d1734e8b0b and 5 moreCVE List
Federal deadline25 Mar 2025Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

  • 3f9e88f2672c4635960570ee9741778d4135ecf5LinuxCVE List
  • 05ade5d4337867929e7ef664e7ac8e0c734f1aafLinuxCVE List
  • 1884ab3d22536a5c14b17c78c2ce76d1734e8b0bLinuxCVE List
  • 9d9f5c75c0c7f31766ec27d90f7a6ac673193191LinuxCVE List
  • 492015e6249fbcd42138b49de3c588d826dd9648LinuxCVE List
  • 177f25d1292c7e16e1199b39c85480f7f8815552LinuxCVE List
Show all 8 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 19 Nov 2024, 01:30 UTCPublishedCVE List
  2. 4 Mar 2025Added to CISA KEVCISA KEV

Description

The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report.

Text from CVE List

Affected versions 22

  • Linuxaffected: 27ce405039bfe6d3f4143415c638f56a3df77dca before e7ea60184e1e88a3c9e437b3265cbb6439aa7e26CVE List
  • Linuxaffected: 27ce405039bfe6d3f4143415c638f56a3df77dca before 3f9e88f2672c4635960570ee9741778d4135ecf5CVE List
  • Linuxaffected: 27ce405039bfe6d3f4143415c638f56a3df77dca before d7dc68d82ab3fcfc3f65322465da3d7031d4ab46CVE List
  • Linuxaffected: 27ce405039bfe6d3f4143415c638f56a3df77dca before 05ade5d4337867929e7ef664e7ac8e0c734f1aafCVE List
  • Linuxaffected: 27ce405039bfe6d3f4143415c638f56a3df77dca before 1884ab3d22536a5c14b17c78c2ce76d1734e8b0bCVE List
  • Linuxaffected: 27ce405039bfe6d3f4143415c638f56a3df77dca before 9d9f5c75c0c7f31766ec27d90f7a6ac673193191CVE List
  • Linuxaffected: 27ce405039bfe6d3f4143415c638f56a3df77dca before 492015e6249fbcd42138b49de3c588d826dd9648CVE List
  • Linuxaffected: 27ce405039bfe6d3f4143415c638f56a3df77dca before 177f25d1292c7e16e1199b39c85480f7f8815552CVE List
  • Linuxaffected: b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7CVE List
  • Linuxaffected: fe6c9b48ebc920ff21c10c50ab2729440c734254CVE List
  • Linuxaffected: 3.10.16 before 3.11CVE List
  • Linuxaffected: 3.11.5 before 3.12CVE List
  • Linuxaffected: 3.12CVE List
  • Linuxunaffected: all versions before 3.12CVE List
  • Linuxunaffected: 4.19.324 through 4.19.*CVE List
  • Linuxunaffected: 5.4.286 through 5.4.*CVE List
  • Linuxunaffected: 5.10.230 through 5.10.*CVE List
  • Linuxunaffected: 5.15.172 through 5.15.*CVE List
  • Linuxunaffected: 6.1.117 through 6.1.*CVE List
  • Linuxunaffected: 6.6.61 through 6.6.*CVE List
  • Linuxunaffected: 6.11.8 through 6.11.*CVE List
  • Linuxunaffected: 6.12CVE List

References 15