Answer in brief
CVE-2024-50302 records a High severity vulnerability in HID: core: zero-initialize the report buffer. The current sources mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2024-50302 records a High severity vulnerability in HID: core: zero-initialize the report buffer. The current sources mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. Known-exploitation status makes exposure review time-sensitive. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=27ce405039bfe6d3f4143415c638f56a3df77dca <e7ea60184e1e88a3c9e437b3265cbb6439aa7e26 || >=27ce405039bfe6d3f4143415c638f56a3df77dca <3f9e88f2672c4635960570ee9741778d4135ecf5 || >=27ce405039bfe6d3f4143415c638f56a3df77dca <d7dc68d82ab3fcfc3f65322465da3d7031d4ab46 || >=27ce405039bfe6d3f4143415c638f56a3df77dca <05ade5d4337867929e7ef664e7ac8e0c734f1aaf || >=27ce405039bfe6d3f4143415c638f56a3df77dca <1884ab3d22536a5c14b17c78c2ce76d1734e8b0b || >=27ce405039bfe6d3f4143415c638f56a3df77dca <9d9f5c75c0c7f31766ec27d90f7a6ac673193191 || >=27ce405039bfe6d3f4143415c638f56a3df77dca <492015e6249fbcd42138b49de3c588d826dd9648 || >=27ce405039bfe6d3f4143415c638f56a3df77dca <177f25d1292c7e16e1199b39c85480f7f8815552 || b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7 || fe6c9b48ebc920ff21c10c50ab2729440c734254 || >=3.10.16 <3.11 || >=3.11.5 <3.12 | e7ea60184e1e88a3c9e437b3265cbb6439aa7e26, 3f9e88f2672c4635960570ee9741778d4135ecf5, d7dc68d82ab3fcfc3f65322465da3d7031d4ab46, 05ade5d4337867929e7ef664e7ac8e0c734f1aaf, 1884ab3d22536a5c14b17c78c2ce76d1734e8b0b, 9d9f5c75c0c7f31766ec27d90f7a6ac673193191, 492015e6249fbcd42138b49de3c588d826dd9648, 177f25d1292c7e16e1199b39c85480f7f8815552, 3.11, 3.12 |
| Linux/Linuxgeneric | 3.12 | Not reported |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
Published upstream
Nov 19, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
May 23, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
May 24, 2026
Added to CISA KEV
Mar 4, 2025
Evidence: source:kev:kev:kev:recordIn the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. Known-exploitation status makes exposure review time-sensitive. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=27ce405039bfe6d3f4143415c638f56a3df77dca <e7ea60184e1e88a3c9e437b3265cbb6439aa7e26 || >=27ce405039bfe6d3f4143415c638f56a3df77dca <3f9e88f2672c4635960570ee9741778d4135ecf5 || >=27ce405039bfe6d3f4143415c638f56a3df77dca <d7dc68d82ab3fcfc3f65322465da3d7031d4ab46 || >=27ce405039bfe6d3f4143415c638f56a3df77dca <05ade5d4337867929e7ef664e7ac8e0c734f1aaf || >=27ce405039bfe6d3f4143415c638f56a3df77dca <1884ab3d22536a5c14b17c78c2ce76d1734e8b0b || >=27ce405039bfe6d3f4143415c638f56a3df77dca <9d9f5c75c0c7f31766ec27d90f7a6ac673193191 || >=27ce405039bfe6d3f4143415c638f56a3df77dca <492015e6249fbcd42138b49de3c588d826dd9648 || >=27ce405039bfe6d3f4143415c638f56a3df77dca <177f25d1292c7e16e1199b39c85480f7f8815552 || b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7 || fe6c9b48ebc920ff21c10c50ab2729440c734254 || >=3.10.16 <3.11 || >=3.11.5 <3.12 | e7ea60184e1e88a3c9e437b3265cbb6439aa7e26, 3f9e88f2672c4635960570ee9741778d4135ecf5, d7dc68d82ab3fcfc3f65322465da3d7031d4ab46, 05ade5d4337867929e7ef664e7ac8e0c734f1aaf, 1884ab3d22536a5c14b17c78c2ce76d1734e8b0b, 9d9f5c75c0c7f31766ec27d90f7a6ac673193191, 492015e6249fbcd42138b49de3c588d826dd9648, 177f25d1292c7e16e1199b39c85480f7f8815552, 3.11, 3.12 |
| Linux/Linuxgeneric | 3.12 | Not reported |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
Published upstream
Nov 19, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
May 23, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
May 24, 2026
Added to CISA KEV
Mar 4, 2025
Evidence: source:kev:kev:kev:recordIn the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
Quoted source text, attributed separately from HOL analysis.