CVE-2024-50302

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50302
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/05ade5d4337867929e7ef664e7ac8e0c734f1aaf Patch
https://git.kernel.org/stable/c/177f25d1292c7e16e1199b39c85480f7f8815552 Patch
https://git.kernel.org/stable/c/1884ab3d22536a5c14b17c78c2ce76d1734e8b0b Patch
https://git.kernel.org/stable/c/3f9e88f2672c4635960570ee9741778d4135ecf5 Patch
https://git.kernel.org/stable/c/492015e6249fbcd42138b49de3c588d826dd9648 Patch
https://git.kernel.org/stable/c/9d9f5c75c0c7f31766ec27d90f7a6ac673193191 Patch
https://git.kernel.org/stable/c/d7dc68d82ab3fcfc3f65322465da3d7031d4ab46 Patch
https://git.kernel.org/stable/c/e7ea60184e1e88a3c9e437b3265cbb6439aa7e26 Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html Mailing List
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html Mailing List
https://cert-portal.siemens.com/productcert/html/ssa-265688.html Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-355557.html Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-50302 US Government Resource
Configurations

Configuration 1 (hide)

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:siemens:simatic_s7-1500_tm_mfp_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_tm_mfp:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:siemens:sinec_os:*:*:*:*:*:*:*:*
OR cpe:2.3:h:siemens:ruggedcom_rst2428p:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc316-8:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc319-4:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc324-4:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc324-4eec:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc332:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc416-8:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc419-4:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc424-4:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc432:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xch328:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xcm324:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xcm328:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xcm332:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr302-32:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr322-12:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr326-8:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr326-8eec:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr502-32:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr522-12:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr524-8wg:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr526-8:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr528-6m:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr552-12m:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xrh334:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xrm334:-:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*
History

12 May 2026, 18:47

Type Values Removed Values Added
CPE cpe:2.3:h:siemens:scalance_xrm334:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc319-4:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rst2428p:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr326-8eec:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_s7-1500_tm_mfp_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc432:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr528-6m:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xcm332:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr552-12m:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xcm328:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc332:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xch328:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc316-8:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr526-8:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:sinec_os:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc324-4eec:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr326-8:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xrh334:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr322-12:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc416-8:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr522-12:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_tm_mfp:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc419-4:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc424-4:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr302-32:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr502-32:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xr524-8wg:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xc324-4:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_xcm324:-:*:*:*:*:*:*:*
First Time Siemens scalance Xc319-4
Siemens scalance Xc324-4eec
Siemens scalance Xr502-32
Siemens scalance Xr522-12
Siemens scalance Xr302-32
Siemens scalance Xr524-8wg
Siemens scalance Xc416-8
Siemens scalance Xr326-8
Siemens scalance Xc424-4
Siemens scalance Xc419-4
Siemens ruggedcom Rst2428p
Siemens scalance Xcm332
Siemens scalance Xr322-12
Siemens scalance Xcm324
Siemens simatic S7-1500 Tm Mfp
Siemens scalance Xcm328
Siemens scalance Xr526-8c
Siemens scalance Xr552-12m
Siemens scalance Xc316-8
Siemens scalance Xrh334
Siemens scalance Xc324-4
Siemens scalance Xr326-8eec
Siemens simatic S7-1500 Tm Mfp Firmware
Siemens
Siemens scalance Xc332
Siemens scalance Xr526-8
Siemens scalance Xr524-8c
Siemens scalance Xr528-6m
Siemens scalance Xch328
Siemens scalance Xc432
Siemens scalance Xrm334
Siemens sinec Os
References () https://cert-portal.siemens.com/productcert/html/ssa-265688.html - () https://cert-portal.siemens.com/productcert/html/ssa-265688.html - Third Party Advisory
References () https://cert-portal.siemens.com/productcert/html/ssa-355557.html - () https://cert-portal.siemens.com/productcert/html/ssa-355557.html - Third Party Advisory

12 May 2026, 13:16

Type Values Removed Values Added
References
  • () https://cert-portal.siemens.com/productcert/html/ssa-265688.html -
  • () https://cert-portal.siemens.com/productcert/html/ssa-355557.html -

04 Nov 2025, 14:36

Type Values Removed Values Added
First Time Debian debian Linux
Debian
CPE cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
References () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html - () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html - Mailing List
References () https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html - () https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html - Mailing List

03 Nov 2025, 23:17

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html -

03 Nov 2025, 21:17

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html -

24 Oct 2025, 20:48

Type Values Removed Values Added
References () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-50302 - () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-50302 - US Government Resource

21 Oct 2025, 23:16

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-50302 -

21 Oct 2025, 20:20

Type Values Removed Values Added
References
  • {'url': 'https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-50302', 'source': '134c704f-9b21-4f2e-91b3-4a467353bcc0'}

21 Oct 2025, 19:20

Type Values Removed Values Added
First Time Google
Google android
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-50302 -
CPE cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

27 Nov 2024, 15:27

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/05ade5d4337867929e7ef664e7ac8e0c734f1aaf - () https://git.kernel.org/stable/c/05ade5d4337867929e7ef664e7ac8e0c734f1aaf - Patch
References () https://git.kernel.org/stable/c/177f25d1292c7e16e1199b39c85480f7f8815552 - () https://git.kernel.org/stable/c/177f25d1292c7e16e1199b39c85480f7f8815552 - Patch
References () https://git.kernel.org/stable/c/1884ab3d22536a5c14b17c78c2ce76d1734e8b0b - () https://git.kernel.org/stable/c/1884ab3d22536a5c14b17c78c2ce76d1734e8b0b - Patch
References () https://git.kernel.org/stable/c/3f9e88f2672c4635960570ee9741778d4135ecf5 - () https://git.kernel.org/stable/c/3f9e88f2672c4635960570ee9741778d4135ecf5 - Patch
References () https://git.kernel.org/stable/c/492015e6249fbcd42138b49de3c588d826dd9648 - () https://git.kernel.org/stable/c/492015e6249fbcd42138b49de3c588d826dd9648 - Patch
References () https://git.kernel.org/stable/c/9d9f5c75c0c7f31766ec27d90f7a6ac673193191 - () https://git.kernel.org/stable/c/9d9f5c75c0c7f31766ec27d90f7a6ac673193191 - Patch
References () https://git.kernel.org/stable/c/d7dc68d82ab3fcfc3f65322465da3d7031d4ab46 - () https://git.kernel.org/stable/c/d7dc68d82ab3fcfc3f65322465da3d7031d4ab46 - Patch
References () https://git.kernel.org/stable/c/e7ea60184e1e88a3c9e437b3265cbb6439aa7e26 - () https://git.kernel.org/stable/c/e7ea60184e1e88a3c9e437b3265cbb6439aa7e26 - Patch
CWE CWE-908
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
First Time Linux linux Kernel
Linux

19 Nov 2024, 21:57

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: HID: núcleo: inicializar en cero el búfer de informes Dado que el búfer de informes es utilizado por todo tipo de controladores de diversas formas, vamos a inicializarlo en cero durante la asignación para asegurarnos de que nunca pueda usarse para filtrar memoria del kernel a través de un informe especialmente manipulado.

19 Nov 2024, 02:16

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-19 02:16

Updated : 2026-05-12 18:47

NVD link : CVE-2024-50302

Mitre link : CVE-2024-50302

CVE.ORG link : CVE-2024-50302

JSON object : View

Products Affected

siemens

  • scalance_xc324-4
  • scalance_xr502-32
  • scalance_xr524-8wg
  • scalance_xcm324
  • scalance_xc432
  • simatic_s7-1500_tm_mfp_firmware
  • scalance_xr302-32
  • scalance_xc419-4
  • scalance_xcm328
  • scalance_xc316-8
  • scalance_xr526-8
  • scalance_xr322-12
  • scalance_xc324-4eec
  • scalance_xr552-12m
  • scalance_xr326-8
  • scalance_xc416-8
  • sinec_os
  • scalance_xr526-8c
  • scalance_xr522-12
  • ruggedcom_rst2428p
  • scalance_xc319-4
  • scalance_xcm332
  • simatic_s7-1500_tm_mfp
  • scalance_xrm334
  • scalance_xch328
  • scalance_xrh334
  • scalance_xr524-8c
  • scalance_xr528-6m
  • scalance_xc332
  • scalance_xr326-8eec
  • scalance_xc424-4

google

  • android

debian

  • debian_linux

linux

  • linux_kernel
CWE
CWE-908

Use of Uninitialized Resource