PatchSiren

PatchSiren cyber security CVE debrief

CVE-2023-52622 Siemens CVE debrief

A vulnerability in the Linux kernel's ext4 filesystem could cause online resizing failures when flexible block groups (flex bg) are oversized. The issue has been resolved in the kernel. Siemens has identified this CVE as applicable to certain industrial networking products running SINEC OS, which incorporates the affected Linux kernel component. CISA published this advisory on August 12, 2025, with subsequent updates through February 25, 2026, including corrections to affected product listings and removal of rejected CVEs. The vulnerability is classified with impact 'Misinformed' per the source advisory. No CVSS score is available in the provided source data.

Vendor
Siemens
Product
RUGGEDCOM RST2428P (6GK6242-6PA00)
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2025-08-12
Original CVE updated
2026-02-25
Advisory published
2025-08-12
Advisory updated
2026-02-25

Who should care

Organizations operating Siemens industrial networking equipment with SINEC OS, particularly those managing ext4 filesystems on RUGGEDCOM and SCALANCE product lines. System administrators responsible for storage management and online filesystem resizing in industrial control environments. Security teams monitoring ICS/OT infrastructure for kernel-level vulnerabilities affecting filesystem integrity.

Technical summary

The vulnerability exists in the Linux kernel's ext4 filesystem implementation, specifically related to online resizing operations when flexible block groups (flex bg) are configured with oversized parameters. The kernel patch resolves failures that could occur during these resize operations. Siemens industrial networking products utilizing SINEC OS incorporate the affected kernel component. The advisory impact classification of 'Misinformed' suggests potential for information disclosure or operational impacts rather than direct code execution. Affected product families include RUGGEDCOM RST2428P and SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family devices.

Defensive priority

medium

Recommended defensive actions

  • Review Siemens ProductCERT advisory SSA-613116 for affected product versions and patch availability
  • Apply kernel updates provided by Siemens for SINEC OS-based products as they become available
  • Verify ext4 filesystem configurations on affected industrial systems to ensure proper flex bg sizing
  • Monitor CISA ICS advisories for additional updates to ICSA-25-226-15
  • Follow CISA ICS recommended practices for defense-in-depth strategies for industrial control systems

Evidence notes

CVE published 2025-08-12 per CISA CSAF advisory ICSA-25-226-15. Modified 2026-02-25. Source indicates impact category 'Misinformed' for affected Siemens products. Vendor confirmed via Siemens ProductCERT SSA-613116.

Sources and references

Verified primary and authoritative sources

  • CVE-2023-52622 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2023-52622

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2023-52622 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2023-52622

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-226-15.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-613116.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-613116.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-15

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.