CVE-2024-50302

HID: core: zero-initialize the report buffer

CVSS 5.5 MEDIUMEPSS 0.8%● KEVCWE-908

In short

The Linux kernel's HID (Human Interface Device) driver doesn't clear its memory buffer when created, potentially allowing sensitive kernel data to leak through specially crafted device reports. This could expose confidential information from the system's memory.

Technical detail

A use-after-free or uninitialized memory condition in the HID core driver's report buffer allocation allows information disclosure of kernel memory contents. The vulnerability requires a malicious or compromised HID device to send specially crafted reports; the impact is limited to confidentiality as uninitialized buffer data may be exposed to userspace via HID event streams.

Summary generated and translated by AI from the official description.

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Linux · Linux

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References