CVE-2024-50302 — HID: core: zero-initialize the report buffer
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in var…
Published: 2024-11-19 · CVSS: 5.5 · CVSS 3.1
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7