PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-36484 Siemens CVE debrief

A vulnerability in the Linux kernel's networking subsystem has been resolved. The issue involved overly strict socket state checks during the accept() system call, which could lead to unexpected connection handling behavior. The fix relaxes these state checks to improve network socket handling robustness.

Vendor
Siemens
Product
RUGGEDCOM RST2428P (6GK6242-6PA00)
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2025-08-12
Original CVE updated
2026-02-25
Advisory published
2025-08-12
Advisory updated
2026-02-25

Who should care

Organizations running Linux-based systems, particularly those with Siemens industrial networking equipment using SINEC OS, should prioritize this patch. System administrators managing SCALANCE and RUGGEDCOM device families should review their kernel versions and apply applicable security updates.

Technical summary

This vulnerability exists in the Linux kernel's networking stack, specifically in the socket acceptance logic. The overly strict socket state verification during the accept() operation could cause improper handling of incoming connections. The resolution involves relaxing these state checks to ensure proper socket state transitions during connection establishment.

Defensive priority

medium

Recommended defensive actions

  • Review Linux kernel version in use and apply vendor-provided security patches addressing CVE-2024-36484
  • For Siemens SINEC OS deployments, consult Siemens ProductCERT advisory SSA-355557 for specific patch guidance
  • Verify network socket handling configurations in affected industrial control systems
  • Monitor vendor security advisories for additional third-party component updates
  • Apply defense-in-depth strategies for industrial control systems per CISA recommended practices

Evidence notes

The vulnerability description indicates a resolution in the Linux kernel related to socket state validation during connection acceptance. The CISA advisory ICSA-25-226-07, republished on 2026-02-25, references this CVE as part of Siemens' third-party component security assessment for SINEC OS. The advisory's threat assessment categorizes impact as 'Misinformed' for affected product configurations.

Sources and references

Verified primary and authoritative sources

  • CVE-2024-36484 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2024-36484

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2024-36484 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2024-36484

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-226-07.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-355557.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-355557.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.