---
title: "CVE-2024-50302: Linux Kernel Use of Uninitialized Resource Vulnerability"
url: https://erroneo.us/security/cve/CVE-2024-50302/
description: "CVE-2024-50302 (Linux Kernel): Exploited in the wild (CISA KEV). In the Linux kernel, the following vulnerability has been resolved: HID: core…"
type: vulnerability-record
section: "Security Digest"
date_published: 2024-11-19
date_modified: 2026-10-15
publisher: erroneo.us
author: erroneo.us Security Desk
cve: "CVE-2024-50302"
kev: true
cvss: 5.5
epss: 0.00811
license: All rights reserved. Quote with attribution and a link.
---

# CVE-2024-50302: Linux Kernel Use of Uninitialized Resource Vulnerability

**Signal:** Exploited: patch now if you run it. CISA has confirmed exploitation in the wild. (Computed from CISA KEV, EPSS and CVSS; not an editorial verdict.)

## Should you act?

- Yes, if you run Linux Kernel. CISA added this CVE to its Known Exploited Vulnerabilities catalog on 2025-03-04, which means there is reliable evidence of exploitation in the wild. US federal agencies must remediate by 2025-03-25 ; treat that as the outer limit, not the target.
- EPSS 0.8% , percentile 56: FIRST’s model estimates a 0.8% chance of exploitation activity in the next 30 days, higher than 56% of all scored CVEs (moderate). EPSS is a probability, not a verdict.
- Needs local access needed. Lower urgency for most teams unless an attacker could already run code on the machine.

## What it is

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.

## Affected products (CVE record)

- Linux Linux: 27ce405039bfe6d3f4143415c638f56a3df77dca < e7ea60184e1e88a3c9e437b3265cbb6439aa7e26, 27ce405039bfe6d3f4143415c638f56a3df77dca < 3f9e88f2672c4635960570ee9741778d4135ecf5, 27ce405039bfe6d3f4143415c638f56a3df77dca < d7dc68d82ab3fcfc3f65322465da3d7031d4ab46, 27ce405039bfe6d3f4143415c638f56a3df77dca < 05ade5d4337867929e7ef664e7ac8e0c734f1aaf, 27ce405039bfe6d3f4143415c638f56a3df77dca < 1884ab3d22536a5c14b17c78c2ce76d1734e8b0b, 27ce405039bfe6d3f4143415c638f56a3df77dca < 9d9f5c75c0c7f31766ec27d90f7a6ac673193191, 27ce405039bfe6d3f4143415c638f56a3df77dca < 492015e6249fbcd42138b49de3c588d826dd9648, 27ce405039bfe6d3f4143415c638f56a3df77dca < 177f25d1292c7e16e1199b39c85480f7f8815552, b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7, fe6c9b48ebc920ff21c10c50ab2729440c734254, 3.10.16 < 3.11, 3.11.5 < 3.12
- Linux Linux: 3.12

## Severity

- CISA-ADP CVSS 3.1: 5.5 `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N`

## Exploitation

- CISA KEV: added 2025-03-04; federal due date 2025-03-25. Known ransomware use: Unknown.
- CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- CISA SSVC assessment: exploitation active , automatable no , technical impact partial .
- FIRST EPSS (model of 2026-10-21): 0.81% probability of exploitation activity in the next 30 days; percentile 56.

## Sources

- [Listed in CISA KEV notes (lore.kernel.org)](https://lore.kernel.org/linux-cve-announce/2024111908-CVE-2024-50302-f677@gregkh/)
- [Listed in CISA KEV notes (source.android.com)](https://source.android.com/docs/security/bulletin/2025-03-01)
- [CVE.org record CVE-2024-50302](https://www.cve.org/CVERecord?id=CVE-2024-50302)
- [NVD entry CVE-2024-50302](https://nvd.nist.gov/vuln/detail/CVE-2024-50302)
- [CISA Known Exploited Vulnerabilities catalog entry](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-50302)
- [git.kernel.org](https://git.kernel.org/stable/c/e7ea60184e1e88a3c9e437b3265cbb6439aa7e26)
- [git.kernel.org](https://git.kernel.org/stable/c/3f9e88f2672c4635960570ee9741778d4135ecf5)
- [git.kernel.org](https://git.kernel.org/stable/c/d7dc68d82ab3fcfc3f65322465da3d7031d4ab46)
- [git.kernel.org](https://git.kernel.org/stable/c/05ade5d4337867929e7ef664e7ac8e0c734f1aaf)
- [git.kernel.org](https://git.kernel.org/stable/c/1884ab3d22536a5c14b17c78c2ce76d1734e8b0b)
- [git.kernel.org](https://git.kernel.org/stable/c/9d9f5c75c0c7f31766ec27d90f7a6ac673193191)
- [git.kernel.org](https://git.kernel.org/stable/c/492015e6249fbcd42138b49de3c588d826dd9648)
- [git.kernel.org](https://git.kernel.org/stable/c/177f25d1292c7e16e1199b39c85480f7f8815552)
- [lists.debian.org](https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html)
- [lists.debian.org](https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html)
- [cert-portal.siemens.com](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)
- [cert-portal.siemens.com](https://cert-portal.siemens.com/productcert/html/ssa-355557.html)

---
Source page: https://erroneo.us/security/cve/CVE-2024-50302/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt