PatchSiren cyber security CVE debrief

CVE-2024-57917 Linux CVE debrief

A vulnerability in the Linux kernel has been resolved, which could cause a warning during the printing of core_siblings_list. The warning is related to different return values from vsnprintf() due to changes in the core_cpumask between steps of calculating and formatting the string. This issue was discovered during fuzz testing and affects Linux kernel maintainers, users of Siemens SIMATIC S7-1500 CPU devices, and administrators of systems using the affected Linux kernel versions. The vulnerability has a CVSS score of 5.7 and a severity of MEDIUM. To address this issue, defenders should verify the Linux kernel version and apply the fix to prevent potential warnings during the The

Vendor: Linux
Product: SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
CVSS: MEDIUM 5.7
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-07-14
Original CVE updated: 2026-07-28
Advisory published: 2026-07-14
Advisory updated: 2026-07-28

Who should care

Linux kernel maintainers, users of Siemens SIMATIC S7-1500 CPU devices, and administrators of systems using the affected Linux kernel versions should be aware of this vulnerability and take steps to address it. They should verify the Linux kernel version and apply the fix to prevent potential warnings during the printing of core_siblings_list. Additionally, they should limit access to the interactive shell of the additional GNU/Linux subsystem to trusted

Why it matters

The vulnerability could cause a warning during the printing of core_siblings_list, and defenders should verify the Linux kernel version and apply the fix to prevent potential issues.

Defenders should verify the Linux kernel version and apply the fix to prevent potential warnings during the printing of core_siblings_list
Administrators should limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only
Users should only build and run applications from trusted sources to minimize potential risks

Technical summary

The vulnerability is related to the printing of core_siblings_list in the Linux kernel. During fuzz testing, a warning was discovered due to different return values from vsnprintf(). The warning occurs because the core_cpumask is modified between steps of calculating and formatting the string. This issue affects Linux kernel maintainers, users of Siemens SIMATIC S7-1500 CPU devices, and administrators of systems using the affected Linux kernel versions. The vulnerability has a CVSS score of 5.7 and a severity of MEDIUM.

Defensive priority

Medium priority for Linux kernel maintainers and users, especially those using Siemens SIMATIC S7-1500 CPU devices.

Recommended defensive actions

Review and apply the fix for the Linux kernel vulnerability
Limit access to the interactive shell of the additional GNU/Linux subsystem to trusted personnel only
Only build and run applications from trusted sources
Verify the Linux kernel version and apply the fix to prevent potential warnings during the printing of core_siblings_list
Monitor systems for potential issues related to the vulnerability
Review compensating controls for exposed systems while remediation is scheduled and verified
Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The vulnerability was discovered during fuzz testing, which revealed a warning in kvasprintf(). The call trace shows that the warning occurred during the printing of core_siblings_list. The issue is related to different return values from vsnprintf() due to changes in the core_cpumask between steps of calculating and formatting the string. The vulnerability affects Linux kernel maintainers, users of Siemens SIMATIC S7-1500 CPU devices, and administrators of systems using the affected Linux kernel versions. The fix involves reviewing

Sources and references

Verified primary and authoritative sources

CVE-2024-57917 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2024-57917

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2024-57917 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2024-57917

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

CVE-2024-57917
Unverified legacy reference

URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-209-04.json

cisa_csaf
Source reference
Unverified legacy reference

URL: https://cert-portal.siemens.com/productcert/csaf/ssa-019113.json

Supplemental source
Source reference
Unverified legacy reference

URL: https://cert-portal.siemens.com/productcert/html/ssa-019113.html

Supplemental source
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04

Supplemental source
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01

Supplemental source
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

Supplemental source
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/topics/industrial-control-systems

Supplemental source
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

Supplemental source

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.