PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-26960 Siemens CVE debrief

A race condition vulnerability exists in the Linux kernel's swap memory management subsystem, specifically between the `free_swap_and_cache()` and `swapoff()` functions. This flaw could allow a local attacker to trigger a denial of service condition. The vulnerability affects Siemens SIMATIC S7-1500 TM MFP industrial control systems that utilize the GNU/Linux subsystem. The issue was resolved in the upstream Linux kernel. Siemens has not released a patch for the affected product as of the advisory publication date.

Vendor
Siemens
Product
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
CVSS
HIGH 7
CISA KEV
Not listed in stored evidence
Original CVE published
2024-05-01
Original CVE updated
2026-08-04
Advisory published
2024-05-01
Advisory updated
2026-08-04

Who should care

Organizations operating Siemens SIMATIC S7-1500 TM MFP systems with the GNU/Linux subsystem enabled, particularly in industrial automation and control system environments where high availability is critical. System administrators responsible for securing OT/ICS environments should prioritize access controls until a patch becomes available.

Technical summary

The vulnerability is a race condition (CWE-362) in the Linux kernel's memory management swap subsystem. The specific race occurs between `free_swap_and_cache()`, which frees swap entries and associated page cache, and `swapoff()`, which deactivates swap devices. Improper synchronization between these operations could lead to use-after-free or null pointer dereference conditions, resulting in system instability or denial of service. The attack requires local access with low privileges and has low attack complexity. No confidentiality or integrity impact is associated with this vulnerability; the sole impact is to availability.

Defensive priority

medium

Recommended defensive actions

  • Restrict interactive shell access to the GNU/Linux subsystem to trusted personnel only
  • Build and run only applications from trusted sources
  • Monitor for future Siemens security advisories regarding patch availability for SSA-265688
  • Apply defense-in-depth strategies for industrial control systems per CISA guidance

Evidence notes

The vulnerability description is sourced from CISA ICS Advisory ICSA-24-102-01, which references the upstream Linux kernel fix for a race condition between free_swap_and_cache() and swapoff(). The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) indicates local attack vector with low attack complexity, requiring low privileges, resulting in high availability impact. The affected product is explicitly identified as the GNU/Linux subsystem within Siemens SIMATIC S7-1500 TM MFP.

Sources and references

Verified primary and authoritative sources

  • CVE-2024-26960 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2024-26960

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2024-26960 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2024-26960

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-102-01.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-265688.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-265688.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-24-102-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.