Your RSA-2048 keys break in 2030. Find every one of them before attackers do.
CISA KEV·Added 2025-03-04 — agencies required to remediate by 2025-03-25

CVE-2024-50302

MEDIUM

HID: core: zero-initialize the report buffer

Also known asA-380395346ASB-A-380395346
Published
Nov 19, 2024
Updated
Apr 2, 2026
Affected
0 pkgs
Patched
None yet
Exploits
None indexed

EPSS Exploitation Probability

via FIRST.org ↗
2.6%probability of exploitation in next 30 days
Lower Risk86th percentile0.00%
0.82%1.64%2.46%3.28%2.8%2.6%Dec 25Apr 26Jun 26

EPSS (Exploit Prediction Scoring System) is a daily probability model maintained by FIRST.org. It estimates the likelihood a CVE will be exploited in production environments within the next 30 days, derived from real-world threat intelligence signals.

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: core: zero-initialize the report buffer

Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.

Frequently Asked Questions

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
O3 Security · Impact-Aware SCA

Is CVE-2024-50302 in your stack?

O3 detects CVE-2024-50302 across dependencies and uses function-level reachability to confirm whether the vulnerable code path is actually reachable — not just present. No false positives.

Scan my stack How O3 SCA works