CVE Watch15 oct 2026

CVE-2024-50302

Linux Kernel Use of Uninitialized Resource Vulnerability

CVSS

5.5

Medio

EPSS

0.8%

p56

KEV

SÍ

4 mar 2025

Exploit Today

0-100

Publicado: 19 nov 2024 · Última mod.: 15 oct 2026 · CWE-908

EPSS · 30d

0.8%EPSS · 30 días0.8%

2026-09-172026-10-15

Ficha del catálogo KEV

Producto

Linux / Kernel

Vulnerabilidad

Linux Kernel Use of Uninitialized Resource Vulnerability

Añadido a KEV

4 mar 2025

Remediar antes de

25 mar 2025

Uso conocido en ransomware

Descripción resumida

The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://lore.kernel.org/linux-cve-announce/2024111908-CVE-2024-50302-f677@gregkh/ ; https://source.android.com/docs/security/bulletin/2025-03-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-50302

Descripción técnica

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1094385.3 MED

27.9%

——83proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak stack bytes via the SOCKS4 reply path when the external-NAT option (-Ne) is configured. Attackers can send a client probe that fails the SOCKS version check to trigger a reply containing uninitialized bytes from the sin structure, exposing high bytes of a userspace pointer that weakens ASLR protections.19h CVE-2026-976296.5 MED

6.5%

——2Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-deterministic manner that is beyond the attacker's control. An attacker could leverage this vulnerability to bypass verification of client certificates. Impact This vulnerability can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with access to sensitive information. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.21h CVE-2026-1040865.5 MED

7.8%

——27-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler (SquashfsHandler.cpp) that allows attackers to leak heap memory by crafting a malicious archive where the superblock’s no_ids field is set so that the final metadata block’s expected size is miscomputed and bypasses the size validation check. By listing or extracting the crafted archive, attackers can cause the application to return uninitialized heap memory as the kpidUserId and kpidGroupId properties, exposing potentially sensitive process memory contents to the user.2d CVE-2026-970118.8 ALT

53.0%

——16Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.17h CVE-2026-968505.5 MED

32.2%

——10Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.3d CVE-2026-968495.5 MED

32.2%

——10Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.3d