| From bippy-5f407fcff5a0 Mon Sep 17 00:00:00 2001 |
| From: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
| To: <linux-cve-announce@vger.kernel.org> |
| Reply-to: <cve@kernel.org>, <linux-kernel@vger.kernel.org> |
| Subject: CVE-2024-50302: HID: core: zero-initialize the report buffer |
| |
| Description |
| =========== |
| |
| In the Linux kernel, the following vulnerability has been resolved: |
| |
| HID: core: zero-initialize the report buffer |
| |
| Since the report buffer is used by all kinds of drivers in various ways, let's |
| zero-initialize it during allocation to make sure that it can't be ever used |
| to leak kernel memory via specially-crafted report. |
| |
| The Linux kernel CVE team has assigned CVE-2024-50302 to this issue. |
| |
| |
| Affected and fixed versions |
| =========================== |
| |
| Issue introduced in 3.12 with commit 27ce405039bfe6d3f4143415c638f56a3df77dca and fixed in 4.19.324 with commit e7ea60184e1e88a3c9e437b3265cbb6439aa7e26 |
| Issue introduced in 3.12 with commit 27ce405039bfe6d3f4143415c638f56a3df77dca and fixed in 5.4.286 with commit 3f9e88f2672c4635960570ee9741778d4135ecf5 |
| Issue introduced in 3.12 with commit 27ce405039bfe6d3f4143415c638f56a3df77dca and fixed in 5.10.230 with commit d7dc68d82ab3fcfc3f65322465da3d7031d4ab46 |
| Issue introduced in 3.12 with commit 27ce405039bfe6d3f4143415c638f56a3df77dca and fixed in 5.15.172 with commit 05ade5d4337867929e7ef664e7ac8e0c734f1aaf |
| Issue introduced in 3.12 with commit 27ce405039bfe6d3f4143415c638f56a3df77dca and fixed in 6.1.117 with commit 1884ab3d22536a5c14b17c78c2ce76d1734e8b0b |
| Issue introduced in 3.12 with commit 27ce405039bfe6d3f4143415c638f56a3df77dca and fixed in 6.6.61 with commit 9d9f5c75c0c7f31766ec27d90f7a6ac673193191 |
| Issue introduced in 3.12 with commit 27ce405039bfe6d3f4143415c638f56a3df77dca and fixed in 6.11.8 with commit 492015e6249fbcd42138b49de3c588d826dd9648 |
| Issue introduced in 3.12 with commit 27ce405039bfe6d3f4143415c638f56a3df77dca and fixed in 6.12 with commit 177f25d1292c7e16e1199b39c85480f7f8815552 |
| Issue introduced in 3.10.16 with commit b2b6cadad699d44a8a5b2a60f3d960e00d6fb3b7 |
| Issue introduced in 3.11.5 with commit fe6c9b48ebc920ff21c10c50ab2729440c734254 |
| |
| Please see https://www.kernel.org for a full list of currently supported |
| kernel versions by the kernel community. |
| |
| Unaffected versions might change over time as fixes are backported to |
| older supported kernel versions. The official CVE entry at |
| https://cve.org/CVERecord/?id=CVE-2024-50302 |
| will be updated if fixes are backported, please check that for the most |
| up to date information about this issue. |
| |
| |
| Affected files |
| ============== |
| |
| The file(s) affected by this issue are: |
| drivers/hid/hid-core.c |
| |
| |
| Mitigation |
| ========== |
| |
| The Linux kernel CVE team recommends that you update to the latest |
| stable kernel version for this, and many other bugfixes. Individual |
| changes are never tested alone, but rather are part of a larger kernel |
| release. Cherry-picking individual commits is not recommended or |
| supported by the Linux kernel community at all. If however, updating to |
| the latest release is impossible, the individual changes to resolve this |
| issue can be found at these commits: |
| https://git.kernel.org/stable/c/e7ea60184e1e88a3c9e437b3265cbb6439aa7e26 |
| https://git.kernel.org/stable/c/3f9e88f2672c4635960570ee9741778d4135ecf5 |
| https://git.kernel.org/stable/c/d7dc68d82ab3fcfc3f65322465da3d7031d4ab46 |
| https://git.kernel.org/stable/c/05ade5d4337867929e7ef664e7ac8e0c734f1aaf |
| https://git.kernel.org/stable/c/1884ab3d22536a5c14b17c78c2ce76d1734e8b0b |
| https://git.kernel.org/stable/c/9d9f5c75c0c7f31766ec27d90f7a6ac673193191 |
| https://git.kernel.org/stable/c/492015e6249fbcd42138b49de3c588d826dd9648 |
| https://git.kernel.org/stable/c/177f25d1292c7e16e1199b39c85480f7f8815552 |
