UBUNTU-CVE-2024-50302

Dashboard / Vulnerabilities / UBUNTU-CVE-2024-50302

UBUNTU-CVE-2024-50302

Summary:

Details: In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.

References: https://ubuntu.com/security/CVE-2024-50302, https://www.cve.org/CVERecord?id=CVE-2024-50302, https://git.kernel.org/linus/177f25d1292c7e16e1199b39c85480f7f8815552, https://git.kernel.org/stable/c/e7ea60184e1e88a3c9e437b3265cbb6439aa7e26, https://git.kernel.org/stable/c/3f9e88f2672c4635960570ee9741778d4135ecf5, https://git.kernel.org/stable/c/d7dc68d82ab3fcfc3f65322465da3d7031d4ab46, https://git.kernel.org/stable/c/05ade5d4337867929e7ef664e7ac8e0c734f1aaf, https://git.kernel.org/stable/c/1884ab3d22536a5c14b17c78c2ce76d1734e8b0b, https://git.kernel.org/stable/c/9d9f5c75c0c7f31766ec27d90f7a6ac673193191, https://git.kernel.org/stable/c/492015e6249fbcd42138b49de3c588d826dd9648, https://git.kernel.org/stable/c/177f25d1292c7e16e1199b39c85480f7f8815552, https://ubuntu.com/security/notices/USN-7276-1, https://ubuntu.com/security/notices/USN-7277-1, https://ubuntu.com/security/notices/USN-7288-1, https://ubuntu.com/security/notices/USN-7289-1, https://ubuntu.com/security/notices/USN-7291-1, https://ubuntu.com/security/notices/USN-7288-2, https://ubuntu.com/security/notices/USN-7289-2, https://ubuntu.com/security/notices/USN-7293-1, https://ubuntu.com/security/notices/USN-7294-1, https://ubuntu.com/security/notices/USN-7295-1, https://ubuntu.com/security/notices/USN-7289-3, https://ubuntu.com/security/notices/USN-7305-1, https://ubuntu.com/security/notices/USN-7289-4, https://ubuntu.com/security/notices/USN-7308-1, https://ubuntu.com/security/notices/USN-7294-2, https://ubuntu.com/security/notices/USN-7294-3, https://ubuntu.com/security/notices/USN-7310-1, https://ubuntu.com/security/notices/USN-7294-4, https://www.cisa.gov/known-exploited-vulnerabilities-catalog, https://ubuntu.com/security/notices/USN-7331-1, https://ubuntu.com/security/notices/USN-7388-1, https://ubuntu.com/security/notices/USN-7389-1, https://ubuntu.com/security/notices/USN-7390-1, https://ubuntu.com/security/notices/USN-7393-1, https://ubuntu.com/security/notices/USN-7401-1, https://ubuntu.com/security/notices/USN-7402-1, https://ubuntu.com/security/notices/USN-7403-1, https://ubuntu.com/security/notices/USN-7402-2, https://ubuntu.com/security/notices/USN-7413-1, https://ubuntu.com/security/notices/USN-7402-3, https://ubuntu.com/security/notices/USN-7402-4, https://ubuntu.com/security/notices/USN-7428-1, https://ubuntu.com/security/notices/USN-7429-1, https://ubuntu.com/security/notices/USN-7428-2, https://ubuntu.com/security/notices/USN-7429-2, https://ubuntu.com/security/notices/USN-7402-5, https://ubuntu.com/security/notices/USN-7451-1, https://ubuntu.com/security/notices/USN-7458-1, https://ubuntu.com/security/notices/USN-7468-1, https://ubuntu.com/security/notices/USN-7523-1, https://ubuntu.com/security/notices/USN-7524-1, https://ubuntu.com/security/notices/USN-7539-1, https://ubuntu.com/security/notices/USN-7540-1, https://ubuntu.com/security/notices/USN-7720-1