PatchSiren

PatchSiren cyber security CVE debrief

CVE-2023-52918 Siemens CVE debrief

A NULL pointer dereference vulnerability exists in the Linux kernel's cx23885 media driver. The cx23885_vdev_init() function can return NULL, but this return value was not checked before use, potentially leading to a kernel crash. This vulnerability affects Siemens industrial networking products that incorporate the vulnerable Linux kernel component. The issue was resolved by adding a NULL pointer check and proper error handling.

Vendor
Siemens
Product
RUGGEDCOM RST2428P (6GK6242-6PA00)
CVSS
NONE
CISA KEV
Not listed in stored evidence
Original CVE published
2025-08-12
Original CVE updated
2026-02-25
Advisory published
2025-08-12
Advisory updated
2026-02-25

Who should care

Organizations operating Siemens SCALANCE and RUGGEDCOM industrial networking infrastructure, particularly those in critical infrastructure sectors. System administrators responsible for firmware management of industrial Ethernet switches and routers. Security teams monitoring OT/ICS environments for kernel-level vulnerabilities in embedded Linux systems.

Technical summary

The vulnerability exists in the cx23885 PCI media driver within the Linux kernel. The cx23885_vdev_init() function, which initializes video device structures, can return NULL on failure. The original code used this return value without validation, leading to a NULL pointer dereference when the subsequent code attempted to access the uninitialized structure. The resolution adds a NULL check and proper error path handling to prevent the crash. This affects Siemens industrial networking products running SINEC OS that incorporate the vulnerable kernel component.

Defensive priority

medium

Recommended defensive actions

  • Review Siemens security advisory SSA-355557 for detailed product impact and patch availability
  • Update affected Siemens RUGGEDCOM RST2428P devices to firmware version V3.2 or later
  • Update affected Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family devices to firmware version V3.2 or later
  • Update affected Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family devices to firmware version V3.2 or later
  • Apply vendor-recommended mitigations for devices where immediate patching is not feasible
  • Monitor CISA ICS advisories for additional guidance on industrial control system security

Evidence notes

The vulnerability description indicates this is a classic NULL pointer dereference in kernel driver initialization code. The fix adds proper validation of the cx23885_vdev_init() return value before dereferencing. Siemens has identified affected products in their SCALANCE and RUGGEDCOM networking device families.

Official resources

public