Known exploited vulnerability
CVE-2024-50302
The short answer
CVE-2024-50302 affects Linux Linux and is rated medium (CVSS 5.5). CISA added it to the Known Exploited Vulnerabilities catalog on 2025-03-04: attackers are using it, so patch it first. The vendor has linked a patch.
What it is
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
Weakness: CWE-908.
Severity
5.5 medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploited (CISA KEV)
Yes, since Mar 4, 2025
Federal due date Mar 25, 2025
EPSS, next 30 days
0.81%
Higher than 57% of scored CVEs
How it can be exploited
- Attack vector
- Local
- Attack complexity
- Low
- Privileges required
- Low
- User interaction
- None
- Scope
- Unchanged
- Confidentiality impact
- High
- Integrity impact
- None
- Availability impact
- None
What CISA says to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Affected products
Linux, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem. NVD's record lists the exact affected versions.
References
- git.kernel.org/stable/c/05ade5d4337867929e7ef664e7ac8e0c734f1aaf Patch
- git.kernel.org/stable/c/177f25d1292c7e16e1199b39c85480f7f8815552 Patch
- git.kernel.org/stable/c/1884ab3d22536a5c14b17c78c2ce76d1734e8b0b Patch
- git.kernel.org/stable/c/3f9e88f2672c4635960570ee9741778d4135ecf5 Patch
- git.kernel.org/stable/c/492015e6249fbcd42138b49de3c588d826dd9648 Patch
- git.kernel.org/stable/c/9d9f5c75c0c7f31766ec27d90f7a6ac673193191 Patch
- git.kernel.org/stable/c/d7dc68d82ab3fcfc3f65322465da3d7031d4ab46 Patch
- git.kernel.org/stable/c/e7ea60184e1e88a3c9e437b3265cbb6439aa7e26 Patch
- lists.debian.org/debian-lts-announce/2025/01/msg00001.html Mailing List
- lists.debian.org/debian-lts-announce/2025/03/msg00002.html Mailing List
- cert-portal.siemens.com/productcert/html/ssa-265688.html Third Party Advisory
- cert-portal.siemens.com/productcert/html/ssa-355557.html Third Party Advisory
Questions
Is CVE-2024-50302 being exploited?
Yes. CISA added CVE-2024-50302 to its Known Exploited Vulnerabilities catalog on 2025-03-04, with a federal remediation due date of 2025-03-25.
How do I fix CVE-2024-50302?
CISA's required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
From NVD, CISA KEV, FIRST EPSS and OSV.dev, checked . Status on NVD: Analyzed. The description is NVD's text, quoted as published.
Related
Latest CVEs this week
Critical and High CVEs from the last 7 days, with KEV and EPSS.
Exploited vulnerabilities by vendor
Every vendor in CISA's KEV catalog, with its count.
Linux exploited vulnerabilities
Everything CISA lists as exploited for Linux.
Vulnerability watch
A briefing and a fix pull request when an advisory hits your dependencies.
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.