CVE-2024-50302: Linux Kernel Use of Uninitialized Resource Vulnerability

KEV

Analyzed

AliasesSUSE-SU-2025:0896-1SUSE-SU-2025:0907-1UBUNTU-CVE-2024-50302+1 more

Published 19-11-2024Last modified 15-10-2026

Vulnerability summary

CVE-2024-50302 is a medium (CVSS 5.5) Use of Uninitialized Resource vulnerability in Linux Kernel. It is known to be exploited: CISA lists it, first on 04-03-2025. EPSS estimates a 0.81% chance of exploitation in the next 30 days, higher than 56.9% of scored vulnerabilities.

Priority

Act nowlisted as exploited

Listed as exploited by CISA (04-03-2025)

Source freshness unavailable

How is this decided?

CVSS score

5.5/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.81%

0%100%

Low · 0.00 pp in 30 days

KEVExploited in the wildCritical · listed in 1 catalog

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 115 · Related 95

DLA-4008-1 DLA-4075-1 DSA-5818-1 LSN-0111-1 LSN-0112-1 RHSA-2025:2473+94 more

Showing 100 of 117.

Timeline

19-11-2024
PublishedVulnerability first disclosed.
04-03-2025
Added to CISA KEVExploitedLinux Kernel Use of Uninitialized Resource Vulnerability
25-03-2025
CISA remediation dueDeadline passedApply mitigations per vendor instructions.
15-10-2026
Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.

CVSS metrics

4 scores · 4 sources · 1 version

v3.15.5

EPSS trend

Probability

0.81%

Chance of exploitation in the next 30 days

Percentile

57%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.81% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 04-03-2025
Federal due date: 25-03-2025

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. source.android.com/docs/security/bulletin/2025-03-01 nvd.nist.gov/vuln/detail/CVE-2024-50302

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-908Use of Uninitialized ResourceThe product uses or accesses a resource that has not been initialized.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu134 products

linux< 3.13.0-207.258 | < 4.4.0-267.301 | < 4.15.0-236.248 | < 5.4.0-208.228 | < 5.15.0-133.144 | < 6.8.0-57.59
linux-allwinner-5.19All versions (No fix recorded)
linux-aws< 4.4.0-1142.148 | < 4.4.0-1180.195 | < 4.15.0-1179.192 | < 5.4.0-1140.150 | < 5.15.0-1078.85 | < 6.8.0-1026.28
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)

linux-aws-5.13All versions (No fix recorded)
linux-aws-5.15< 5.15.0-1080.87~20.04.1
linux-aws-5.19All versions (No fix recorded)
linux-aws-5.3All versions (No fix recorded)
linux-aws-5.4< 5.4.0-1142.152~18.04.1
linux-aws-5.8All versions (No fix recorded)
linux-aws-6.2All versions (No fix recorded)
linux-aws-6.5All versions (No fix recorded)
linux-aws-6.8< 6.8.0-1027.29~22.04.1
linux-aws-fips< 4.15.0-2117.123 | All versions (No fix recorded) | < 5.4.0-1140.151+fips1 | < 5.15.0-1078.85+fips1
linux-aws-hwe< 4.15.0-1179.192~16.04.1
linux-azure< 4.15.0-1187.202~14.04.1 | < 4.15.0-1187.202~16.04.1 | All versions (No fix recorded) | < 5.4.0-1145.152 | < 5.15.0-1081.90 | < 6.8.0-1026.31
linux-azure-4.15< 4.15.0-1187.202
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13All versions (No fix recorded)
linux-azure-5.15< 5.15.0-1081.90~20.04.1
linux-azure-5.19All versions (No fix recorded)
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.4< 5.4.0-1145.152~18.04.1
linux-azure-5.8All versions (No fix recorded)
linux-azure-6.11< 6.11.0-1012.12~24.04.1
linux-azure-6.2All versions (No fix recorded)
linux-azure-6.5All versions (No fix recorded)
linux-azure-6.8< 6.8.0-1026.31~22.04.1
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fdeAll versions (No fix recorded) | < 5.15.0-1081.90.1
linux-azure-fde-5.19All versions (No fix recorded)
linux-azure-fde-6.2All versions (No fix recorded)
linux-azure-fips< 4.15.0-2096.102 | All versions (No fix recorded) | < 5.4.0-1145.152+fips1 | < 5.15.0-1080.89+fips1
linux-azure-nvidia< 6.8.0-1014.15
linux-bluefield< 5.4.0-1099.106 | < 5.15.0-1060.62
linux-fips< 4.4.0-1112.119 | All versions (No fix recorded) | < 4.15.0-1134.145 | < 5.4.0-1116.126 | < 5.15.0-133.144+fips1 | < 6.8.0-78.78+fips1
linux-gcp< 4.15.0-1172.189~16.04.1 | All versions (No fix recorded) | < 5.4.0-1143.152 | < 5.15.0-1077.86 | < 6.8.0-1027.29
linux-gcp-4.15< 4.15.0-1172.189
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13All versions (No fix recorded)
linux-gcp-5.15< 5.15.0-1077.86~20.04.1
linux-gcp-5.19All versions (No fix recorded)
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.4< 5.4.0-1143.152~18.04.1
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-6.11< 6.11.0-1011.11~24.04.1
linux-gcp-6.2All versions (No fix recorded)
linux-gcp-6.5All versions (No fix recorded)
linux-gcp-6.8< 6.8.0-1027.29~22.04.1
linux-gcp-fips< 4.15.0-2080.86 | All versions (No fix recorded) | < 5.4.0-1143.152+fips1 | < 5.15.0-1077.86+fips1
linux-gkeAll versions (No fix recorded) | < 5.15.0-1075.81 | < 6.8.0-1022.26
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.15All versions (No fix recorded)
linux-gke-5.4All versions (No fix recorded)
linux-gkeopAll versions (No fix recorded) | < 5.15.0-1060.68 | < 6.8.0-1009.11
linux-gkeop-5.15All versions (No fix recorded)
linux-gkeop-5.4All versions (No fix recorded)
linux-hwe< 4.15.0-236.248~16.04.1 | All versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13All versions (No fix recorded)
linux-hwe-5.15< 5.15.0-134.145~20.04.1
linux-hwe-5.19All versions (No fix recorded)
linux-hwe-5.4< 5.4.0-208.228~18.04.1
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-6.2All versions (No fix recorded)
linux-hwe-6.5All versions (No fix recorded)
linux-hwe-6.8< 6.8.0-57.59~22.04.1
linux-hwe-edgeAll versions (No fix recorded)
linux-ibm< 5.4.0-1086.91 | < 5.15.0-1070.73 | < 6.8.0-1023.23
linux-ibm-5.15< 5.15.0-1074.77~20.04.1
linux-ibm-5.4< 5.4.0-1086.91~18.04.1
linux-ibm-6.8< 6.8.0-1023.23~22.04.1
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtime< 5.15.0-1071.73
linux-intel-iotg< 5.15.0-1073.79
linux-intel-iotg-5.15< 5.15.0-1073.79~20.04.2
linux-iot< 5.4.0-1048.51
linux-kvm< 4.4.0-1143.154 | < 4.15.0-1162.167 | < 5.4.0-1127.136 | < 5.15.0-1076.81
linux-lowlatency< 5.15.0-133.143 | < 6.8.0-57.59.1
linux-lowlatency-hwe-5.15< 5.15.0-133.143~20.04.1
linux-lowlatency-hwe-5.19All versions (No fix recorded)
linux-lowlatency-hwe-6.2All versions (No fix recorded)
linux-lowlatency-hwe-6.5All versions (No fix recorded)
linux-lowlatency-hwe-6.8< 6.8.0-57.59.1~22.04.1
linux-lts-xenial< 4.4.0-267.301~14.04.1
linux-nvidia< 5.15.0-1072.73 | < 6.8.0-1025.28
linux-nvidia-6.11< 6.11.0-1007.7
linux-nvidia-6.2All versions (No fix recorded)
linux-nvidia-6.5All versions (No fix recorded)
linux-nvidia-6.8< 6.8.0-1025.28~22.04.1
linux-nvidia-lowlatency< 6.8.0-1025.28.1
linux-nvidia-tegra< 5.15.0-1033.33 | < 6.8.0-1008.8
linux-nvidia-tegra-5.15< 5.15.0-1039.39~20.04.1
linux-nvidia-tegra-igx< 5.15.0-1021.21
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14All versions (No fix recorded)
linux-oem-5.17All versions (No fix recorded)
linux-oem-5.6All versions (No fix recorded)
linux-oem-6.0All versions (No fix recorded)
linux-oem-6.1All versions (No fix recorded)
linux-oem-6.11< 6.11.0-1015.15
linux-oem-6.5All versions (No fix recorded)
linux-oem-6.8< 6.8.0-1025.25
linux-oracle< 4.15.0-1141.152~16.04.1 | < 4.15.0-1141.152 | < 5.4.0-1138.147 | < 5.15.0-1075.81 | < 6.8.0-1023.24
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13All versions (No fix recorded)
linux-oracle-5.15< 5.15.0-1075.81~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.4< 5.4.0-1138.147~18.04.1
linux-oracle-5.8All versions (No fix recorded)
linux-oracle-6.5All versions (No fix recorded)
linux-oracle-6.8< 6.8.0-1023.24~22.04.1
linux-raspi< 5.4.0-1129.142 | < 5.15.0-1072.75 | < 6.8.0-1028.32
linux-raspi-5.4< 5.4.0-1129.142~18.04.1
linux-raspi-realtimeAll versions (No fix recorded) | < 6.8.0-2023.24
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded) | < 5.15.0-1078.86 | < 6.8.1-1019.20
linux-realtime-6.8< 6.8.1-1019.20~22.04.1
linux-riscvAll versions (No fix recorded) | < 6.8.0-57.59.1
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.15< 5.15.0-1073.77~20.04.1
linux-riscv-5.19All versions (No fix recorded)
linux-riscv-5.8All versions (No fix recorded)
linux-riscv-6.5All versions (No fix recorded)
linux-riscv-6.8< 6.8.0-57.59.1~22.04.1
linux-starfive-5.19All versions (No fix recorded)
linux-starfive-6.2All versions (No fix recorded)
linux-starfive-6.5All versions (No fix recorded)
linux-xilinx< 6.8.0-1017.18
linux-xilinx-zynqmp< 5.4.0-1058.62 | < 5.15.0-1044.48

Show all 134

Debian2 products

linux< 6.1.119-1 | < 6.11.9-1
debian_linuxEOL11.0

Linux2 products

linux≥ 27ce405039bfe6d3f4143415c638f56a3df77dca, < e7ea60184e1e88a3c9e437b3265cbb6439aa7e26 | ≥ 27ce405039bfe6d3f4143415c638f56a3df77dca, < 3f9e88f2672c4635960570ee9741778d4135ecf5 | ≥ 27ce405039bfe6d3f4143415c638f56a3df77dca, < d7dc68d82ab3fcfc3f65322465da3d7031d4ab46 | ≥ 27ce405039bfe6d3f4143415c638f56a3df77dca, < 05ade5d4337867929e7ef664e7ac8e0c734f1aaf | ≥ 27ce405039bfe6d3f4143415c638f56a3df77dca, < 1884ab3d22536a5c14b17c78c2ce76d1734e8b0b | ≥ 27ce405039bfe6d3f4143415c638f56a3df77dca, < 9d9f5c75c0c7f31766ec27d90f7a6ac673193191 | ≥ 27ce405039bfe6d3f4143415c638f56a3df77dca, < 492015e6249fbcd42138b49de3c588d826dd9648 | ≥ 27ce405039bfe6d3f4143415c638f56a3df77dca, < 177f25d1292c7e16e1199b39c85480f7f8815552 | b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7 | fe6c9b48ebc920ff21c10c50ab2729440c734254 | ≥ 3.10.16, < 3.11 | ≥ 3.11.5, < 3.12 | 3.12
linux_kernel≥ 3.12, < 4.19.324 | ≥ 4.20, < 5.4.286 | ≥ 5.5, < 5.10.230 | ≥ 5.11, < 5.15.172 | ≥ 5.16, < 6.1.117 | ≥ 6.2, < 6.6.61 | ≥ 6.7, < 6.11.8 | 6.12:rc1 | 6.12:rc2 | 6.12:rc3 | 6.12:rc4 | 6.12:rc5 | 6.12:rc6

Siemens2 products

simatic_s7-1500_tm_mfp_firmwarena
sinec_os< 3.2

Suse2 products

kernel-livepatch-SLE15-SP3_Update_50&distro=SUSE Linux Enterprise Live Patching 15 SP3< 4-150300.2.1
kgraft-patch-SLE12-SP5_Update_62&distro=SUSE Linux Enterprise Live Patching 12 SP5< 5-2.1

Google1 product