Read the docs
TI-2024-33743 Aliases CVE-2024-50302GHSA-9qwc-r24c-26j3

HID: core: zero-initialize the report buffer

Priority HIGH 82Exploited in the wildCWE-908Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Partial Red Hat: 48 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-908 and the CVSS impact.

Summary

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.

Why it matters now

Exploitation Active In CISA KEV since 2025-03-04CISA due date 2025-03-25
EPSS 0.00811 57th percentileScored 2026-11-07
Fix Partial Linux (Linux): 3.11, 3.12, 4.19.324 +7Red Hat: 24 advisoriesRed Hat: 48 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
LinuxLinux3.10.16 to before 3.11; 3.11.5 to before 3.123.11, 3.12Patch availableCNA
LinuxLinux3.12 and later4.19.324, 5.4.286, 5.10.230, 5.15.172, 6.1.117, 6.6.61, 6.11.8, 6.12Patch availableCNA
  • Linux VendorLinux Affected 3.10.16 to before 3.11; 3.11.5 to before 3.12 Fixed in 3.11, 3.12 Patch available CNA
  • Linux VendorLinux Affected 3.12 and later Fixed in 4.19.324, 5.4.286, 5.10.230, 5.15.172, 6.1.117, 6.6.61, 6.11.8, 6.12 Patch available CNA

CPE configurations NVD · 40

CPEVersionsRoleVendor
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*not specified by NVDVulnerableGoogle
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*11.0VulnerableDebian
cpe:2.3:o:siemens:simatic_s7-1500_tm_mfp_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:simatic_s7-1500_tm_mfp:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:sinec_os:*:*:*:*:*:*:*:*before 3.2VulnerableSiemens
cpe:2.3:h:siemens:ruggedcom_rst2428p:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xc316-8:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xc319-4:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xc324-4:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xc324-4eec:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:google:android:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Google
  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian
  • cpe:2.3:o:siemens:simatic_s7-1500_tm_mfp_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_s7-1500_tm_mfp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:sinec_os:*:*:*:*:*:*:*:* Versions before 3.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:ruggedcom_rst2428p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xc316-8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xc319-4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xc324-4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xc324-4eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 30 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:siemens:scalance_xc332:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xc416-8:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xc419-4:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xc424-4:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xc432:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xch328:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xcm324:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xcm328:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xcm332:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xr302-32:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xr322-12:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xr326-8:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xr326-8eec:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xr502-32:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xr522-12:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xr524-8wg:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xr526-8:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xr528-6m:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xr552-12m:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xrh334:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:h:siemens:scalance_xrm334:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*3.12 to before 4.19.324; 4.20 to before 5.4.286; 5.5 to before 5.10.230; 5.11 to before 5.15.172; 5.16 to before 6.1.117; 6.2 to before 6.6.61; 6.7 to before 6.11.8VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*6.12 rc1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*6.12 rc2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*6.12 rc3VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*6.12 rc4VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*6.12 rc5VulnerableLinux
cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*6.12 rc6VulnerableLinux
  • cpe:2.3:h:siemens:scalance_xc332:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xc416-8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xc419-4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xc424-4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xc432:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xch328:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xcm324:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xcm328:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xcm332:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xr302-32:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xr322-12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xr326-8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xr326-8eec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xr502-32:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xr522-12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xr524-8wg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xr526-8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xr528-6m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xr552-12m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xrh334:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:h:siemens:scalance_xrm334:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions 3.12 to before 4.19.324; 4.20 to before 5.4.286; 5.5 to before 5.10.230; 5.11 to before 5.15.172; 5.16 to before 6.1.117; 6.2 to before 6.6.61; 6.7 to before 6.11.8 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* Versions 6.12 rc1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* Versions 6.12 rc2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:* Versions 6.12 rc3 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:* Versions 6.12 rc4 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:* Versions 6.12 rc5 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:* Versions 6.12 rc6 Vulnerable ·Linux

Remediation

  • Fix · CNA Linux (Linux) Fixed in 3.11, 3.12
  • Fix · CNA Linux (Linux) Fixed in 4.19.324, 5.4.286, 5.10.230, 5.15.172, 6.1.117, 6.6.61, 6.11.8, 6.12

Red Hat 24 advisories

  • RHSA-2025:3301 Released 2025-04-03 · Red Hat rating Important
    OpenShift Container Platform 4.16.38 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-agent-installer-api-server-rhel9, openshift4/ose-aws-pod-identity-webhook-rhel9, openshift4/ose-azure-workload-identity-webhook-rhel9 +3
  • RHSA-2025:2701 Released 2025-03-20 · Red Hat rating Important
    OpenShift Container Platform 4.13.56 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-agent-installer-csr-approver-rhel8, openshift4/ose-agent-installer-node-agent-rhel8, openshift4/ose-agent-installer-orchestrator-rhel8 +3
  • RHSA-2025:2710 Released 2025-03-19 · Red Hat rating Important
    OpenShift Container Platform 4.14.49 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-agent-installer-node-agent-rhel9, openshift4/ose-docker-builder, rhcos
Show 21 more Red Hat advisories
  • RHSA-2025:2441 Released 2025-03-13 · Red Hat rating Important
    OpenShift Container Platform 4.12.74 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-agent-installer-csr-approver-rhel8, openshift4/ose-agent-installer-orchestrator-rhel8, openshift4/ose-docker-builder +2
  • RHSA-2025:2454 Released 2025-03-13 · Red Hat rating Important
    OpenShift Container Platform 4.15.47 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-docker-builder, rhcos
  • RHSA-2025:2445 Released 2025-03-12 · Red Hat rating Important
    OpenShift Container Platform 4.17.20 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/ose-docker-builder-rhel9, openshift4/ose-operator-framework-tools-rhel9, openshift4/ose-operator-lifecycle-manager-rhel9 +2
  • RHSA-2025:2646 Released 2025-03-11 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) bpftool-4.18.0-193.146.1.el8_2, kernel-4.18.0-193.146.1.el8_2, kernel-abi-whitelists-4.18.0-193.146.1.el8_2 +14
  • RHSA-2025:2627 Released 2025-03-11 · Red Hat rating Important
    kernel security update
    • Red Hat CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-503.31.1.el9_5, libperf-5.14.0-503.31.1.el9_5
    • Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-503.31.1.el9_5, kernel-64k-debug-devel-matched-5.14.0-503.31.1.el9_5, kernel-64k-devel-5.14.0-503.31.1.el9_5 +11
    • Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.4.0-503.31.1.el9_5, kernel-5.14.0-503.31.1.el9_5, kernel-64k-5.14.0-503.31.1.el9_5 +30
    • Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-503.31.1.el9_5, kernel-rt-core-5.14.0-503.31.1.el9_5, kernel-rt-debug-5.14.0-503.31.1.el9_5 +9
    • Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-503.31.1.el9_5, kernel-rt-core-5.14.0-503.31.1.el9_5, kernel-rt-debug-5.14.0-503.31.1.el9_5 +11
  • RHSA-2025:2449 Released 2025-03-11 · Red Hat rating Important
    OpenShift Container Platform 4.18.4 security update
    • Red Hat OpenShift Container Platform 4.18 openshift4/oc-mirror-plugin-rhel9, openshift4/ose-docker-builder-rhel9, openshift4/ose-nutanix-machine-controllers-rhel9 +6
  • RHSA-2025:2528 Released 2025-03-10 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.151.1.el8_4, kernel-4.18.0-305.151.1.el8_4, kernel-abi-stablelists-4.18.0-305.151.1.el8_4 +14
    • Red Hat Enterprise Linux BaseOS E4S (v.8.4) bpftool-4.18.0-305.151.1.el8_4, kernel-4.18.0-305.151.1.el8_4, kernel-abi-stablelists-4.18.0-305.151.1.el8_4 +14
    • Red Hat Enterprise Linux BaseOS TUS (v.8.4) bpftool-4.18.0-305.151.1.el8_4, kernel-4.18.0-305.151.1.el8_4, kernel-abi-stablelists-4.18.0-305.151.1.el8_4 +14
  • RHSA-2025:2525 Released 2025-03-10 · Red Hat rating Important
    kernel security update
    • Red Hat CodeReady Linux Builder EUS (v.8.8) kernel-tools-libs-devel-4.18.0-477.93.1.el8_8
    • Red Hat Enterprise Linux BaseOS EUS (v.8.8) bpftool-4.18.0-477.93.1.el8_8, kernel-4.18.0-477.93.1.el8_8, kernel-abi-stablelists-4.18.0-477.93.1.el8_8 +19
  • RHSA-2025:2524 Released 2025-03-10 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux NFV TUS (v.8.4) kernel-rt-4.18.0-305.151.1.rt7.228.el8_4, kernel-rt-core-4.18.0-305.151.1.rt7.228.el8_4, kernel-rt-debug-4.18.0-305.151.1.rt7.228.el8_4 +9
    • Red Hat Enterprise Linux RT TUS (v.8.4) kernel-rt-4.18.0-305.151.1.rt7.228.el8_4, kernel-rt-core-4.18.0-305.151.1.rt7.228.el8_4, kernel-rt-debug-4.18.0-305.151.1.rt7.228.el8_4 +7
  • RHSA-2025:2488 Released 2025-03-10 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) kernel-debug-devel-5.14.0-70.125.1.el9_0, kernel-debug-devel-matched-5.14.0-70.125.1.el9_0, kernel-devel-5.14.0-70.125.1.el9_0 +5
    • Red Hat Enterprise Linux BaseOS E4S (v.9.0) bpftool-5.14.0-70.125.1.el9_0, kernel-5.14.0-70.125.1.el9_0, kernel-abi-stablelists-5.14.0-70.125.1.el9_0 +14
  • RHSA-2025:2517 Released 2025-03-10 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) kernel-2.6.32-754.56.1.el6, kernel-abi-whitelists-2.6.32-754.56.1.el6, kernel-debug-2.6.32-754.56.1.el6 +7
    • Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) python-perf-2.6.32-754.56.1.el6
  • RHSA-2025:2514 Released 2025-03-10 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server AUS (v. 7.7) bpftool-3.10.0-1062.93.1.el7, kernel-3.10.0-1062.93.1.el7, kernel-abi-whitelists-3.10.0-1062.93.1.el7 +8
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.93.1.el7
  • RHSA-2025:2512 Released 2025-03-10 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux NFV E4S (v.9.0) kernel-rt-5.14.0-70.125.1.rt21.197.el9_0, kernel-rt-core-5.14.0-70.125.1.rt21.197.el9_0, kernel-rt-debug-5.14.0-70.125.1.rt21.197.el9_0 +9
    • Red Hat Enterprise Linux Real Time E4S (v.9.0) kernel-rt-5.14.0-70.125.1.rt21.197.el9_0, kernel-rt-core-5.14.0-70.125.1.rt21.197.el9_0, kernel-rt-debug-5.14.0-70.125.1.rt21.197.el9_0 +7
  • RHSA-2025:2510 Released 2025-03-10 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux for Real Time (v. 7 ELS) kernel-rt-3.10.0-1160.133.1.rt56.1285.el7, kernel-rt-debug-3.10.0-1160.133.1.rt56.1285.el7, kernel-rt-debug-devel-3.10.0-1160.133.1.rt56.1285.el7 +4
  • RHSA-2025:2501 Released 2025-03-10 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) bpftool-3.10.0-1160.133.1.el7, kernel-3.10.0-1160.133.1.el7, kernel-abi-whitelists-3.10.0-1160.133.1.el7 +11
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) kernel-debug-devel-3.10.0-1160.133.1.el7, kernel-tools-libs-devel-3.10.0-1160.133.1.el7
  • RHSA-2025:2490 Released 2025-03-10 · Red Hat rating Important
    kernel security update
    • Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.59.1.el9_4, libperf-5.14.0-427.59.1.el9_4
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.59.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.59.1.el9_4, kernel-64k-devel-5.14.0-427.59.1.el9_4 +11
    • Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.59.1.el9_4, kernel-5.14.0-427.59.1.el9_4, kernel-64k-5.14.0-427.59.1.el9_4 +29
    • Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.59.1.el9_4, kernel-rt-core-5.14.0-427.59.1.el9_4, kernel-rt-debug-5.14.0-427.59.1.el9_4 +9
    • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.59.1.el9_4, kernel-rt-core-5.14.0-427.59.1.el9_4, kernel-rt-debug-5.14.0-427.59.1.el9_4 +11
  • RHSA-2025:2489 Released 2025-03-10 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.141.1.el8_6, kernel-4.18.0-372.141.1.el8_6, kernel-abi-stablelists-4.18.0-372.141.1.el8_6 +14
    • Red Hat Enterprise Linux BaseOS E4S (v.8.6) bpftool-4.18.0-372.141.1.el8_6, kernel-4.18.0-372.141.1.el8_6, kernel-abi-stablelists-4.18.0-372.141.1.el8_6 +19
    • Red Hat Enterprise Linux BaseOS TUS (v.8.6) bpftool-4.18.0-372.141.1.el8_6, kernel-4.18.0-372.141.1.el8_6, kernel-abi-stablelists-4.18.0-372.141.1.el8_6 +14
  • RHSA-2025:2475 Released 2025-03-10 · Red Hat rating Important
    kernel security update
    • Red Hat CodeReady Linux Builder EUS (v.9.2) kernel-tools-libs-devel-5.14.0-284.108.1.el9_2
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) kernel-64k-debug-devel-5.14.0-284.108.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.108.1.el9_2, kernel-64k-devel-5.14.0-284.108.1.el9_2 +10
    • Red Hat Enterprise Linux BaseOS EUS (v.9.2) bpftool-7.0.0-284.108.1.el9_2, kernel-5.14.0-284.108.1.el9_2, kernel-64k-5.14.0-284.108.1.el9_2 +29
  • RHSA-2025:2476 Released 2025-03-10 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux Real Time EUS (v.9.2) kernel-rt-5.14.0-284.108.1.rt14.393.el9_2, kernel-rt-core-5.14.0-284.108.1.rt14.393.el9_2, kernel-rt-debug-5.14.0-284.108.1.rt14.393.el9_2 +9
    • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2) kernel-rt-5.14.0-284.108.1.rt14.393.el9_2, kernel-rt-core-5.14.0-284.108.1.rt14.393.el9_2, kernel-rt-debug-5.14.0-284.108.1.rt14.393.el9_2 +11
  • RHSA-2025:2473 Released 2025-03-10 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-553.44.1.el8_10, kernel-4.18.0-553.44.1.el8_10, kernel-abi-stablelists-4.18.0-553.44.1.el8_10 +19
    • Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-553.44.1.el8_10
  • RHSA-2025:2474 Released 2025-03-10 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.44.1.rt7.385.el8_10, kernel-rt-core-4.18.0-553.44.1.rt7.385.el8_10, kernel-rt-debug-4.18.0-553.44.1.rt7.385.el8_10 +9
    • Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.44.1.rt7.385.el8_10, kernel-rt-core-4.18.0-553.44.1.rt7.385.el8_10, kernel-rt-debug-4.18.0-553.44.1.rt7.385.el8_10 +7

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat CodeReady Linux Builder (v. 9)Fixed RHSA-2025:2627
Red Hat CodeReady Linux Builder EUS (v.8.8)Fixed RHSA-2025:2525
Red Hat CodeReady Linux Builder EUS (v.9.2)Fixed RHSA-2025:2475
Red Hat CodeReady Linux Builder EUS (v.9.4)Fixed RHSA-2025:2490
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:2627
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2025:2488
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2025:2475
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2025:2490
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2025:2473
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2025:2627
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2025:2646
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2025:2528
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2025:2489
Red Hat Enterprise Linux BaseOS E4S (v.8.4)Fixed RHSA-2025:2528
Red Hat Enterprise Linux BaseOS E4S (v.8.6)Fixed RHSA-2025:2489
Red Hat Enterprise Linux BaseOS E4S (v.9.0)Fixed RHSA-2025:2488
Red Hat Enterprise Linux BaseOS EUS (v.8.8)Fixed RHSA-2025:2525
Red Hat Enterprise Linux BaseOS EUS (v.9.2)Fixed RHSA-2025:2475
Red Hat Enterprise Linux BaseOS EUS (v.9.4)Fixed RHSA-2025:2490
Red Hat Enterprise Linux BaseOS TUS (v.8.4)Fixed RHSA-2025:2528
Red Hat Enterprise Linux BaseOS TUS (v.8.6)Fixed RHSA-2025:2489
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2025:2473
Red Hat Enterprise Linux NFV (v. 8)Fixed RHSA-2025:2474
Red Hat Enterprise Linux NFV E4S (v.9.0)Fixed RHSA-2025:2512
Red Hat Enterprise Linux NFV TUS (v.8.4)Fixed RHSA-2025:2524
Red Hat Enterprise Linux RT (v. 8)Fixed RHSA-2025:2474
Red Hat Enterprise Linux RT TUS (v.8.4)Fixed RHSA-2025:2524
Red Hat Enterprise Linux Real Time (v. 9)Fixed RHSA-2025:2627
Red Hat Enterprise Linux Real Time E4S (v.9.0)Fixed RHSA-2025:2512
Red Hat Enterprise Linux Real Time EUS (v.9.2)Fixed RHSA-2025:2476
Red Hat Enterprise Linux Real Time EUS (v.9.4)Fixed RHSA-2025:2490
Red Hat Enterprise Linux Real Time for NFV (v. 9)Fixed RHSA-2025:2627
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2)Fixed RHSA-2025:2476
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4)Fixed RHSA-2025:2490
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2025:2501
Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)Fixed RHSA-2025:2517
Red Hat Enterprise Linux Server AUS (v. 7.7)Fixed RHSA-2025:2514
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2025:2501
Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)Fixed RHSA-2025:2517
Red Hat Enterprise Linux Server Optional AUS (v. 7.7)Fixed RHSA-2025:2514
Red Hat Enterprise Linux for Real Time (v. 7 ELS)Fixed RHSA-2025:2510
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2025:2441
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2025:2701
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2025:2710
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2025:2454
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2025:3301
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2025:2445
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2025:2449
Not affected: 8 products
  • Red Hat Enterprise Linux 10
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Container Platform 4.18

Timeline

  1. 2025-03-04 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2024-50302
  3. 2026-10-03 Alias added: GHSA-9qwc-r24c-26j3
  4. 2026-10-09 Affected versions changed · Red Hat
  5. 2026-10-29 Affected versions changed · Red Hat

References

Patch 8

Advisory 2

  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
  • TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
  • TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
  • TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
  • TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
See all 15278 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences