vulnerability

Red Hat OpenShift: CVE-2024-50302: kernel: HID: core: zero-initialize the report buffer

Severity
5
CVSS
(AV:L/AC:L/Au:S/C:C/I:N/A:N)
Published
Nov 19, 2024
Added
Mar 13, 2025
Modified
Aug 11, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: core: zero-initialize the report buffer

Since the report buffer is used by all kinds of drivers in various ways, let's
zero-initialize it during allocation to make sure that it can't be ever used
to leak kernel memory via specially-crafted report.

Solution

linuxrpm-upgrade-rhcos

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.