PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-41046 Siemens CVE debrief

CISA’s advisory for Siemens SIMATIC S7-1500 TM MFP - BIOS maps CVE-2024-41046 to a Linux kernel double-free in the lantiq_etop detach path. The source says the descriptor count is not incremented, so the same skb can be released multiple times, which is consistent with a serious availability risk. At publication time, Siemens listed no fix and only a limited workaround.

Vendor
Siemens
Product
SIMATIC S7-1500 TM MFP - BIOS
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2025-08-12
Original CVE updated
2026-02-25
Advisory published
2025-08-12
Advisory updated
2026-02-25

Who should care

Siemens SIMATIC S7-1500 TM MFP - BIOS operators, OT/ICS administrators, asset owners, and responders responsible for devices that may include the affected Linux kernel component.

Technical summary

The advisory describes a double-free in the Linux kernel lantiq_etop driver during detach. Because the released descriptor count is never incremented, the same skb may be released more than once. The CISA/Siemens CSAF entry lists Siemens SIMATIC S7-1500 TM MFP - BIOS as the affected product, gives a CVSS 3.1 vector of AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (5.5 Medium), and states that no fix is currently available.

Defensive priority

Medium, elevated for affected Siemens OT deployments because the advisory reports no fix currently available and the impact is high availability loss.

Recommended defensive actions

  • Confirm whether Siemens SIMATIC S7-1500 TM MFP - BIOS is deployed in your environment and map any Linux kernel components exposed through the product.
  • Review Siemens advisory SSA-503939 and CISA advisory ICSA-25-072-03 for the latest status and revisions.
  • Apply Siemens’ workaround guidance: only build and run applications from trusted sources.
  • Restrict local user access and administrative privileges on affected systems where feasible, since the CVSS vector indicates local, low-privilege access.
  • Monitor affected devices for unexpected crashes, resets, or other availability issues.
  • Plan compensating controls and maintenance windows because the advisory states that no fix is currently available.

Evidence notes

This debrief is based on the CISA CSAF advisory ICSA-25-072-03 and Siemens references. The advisory text describes a Linux kernel lantiq_etop double-free in detach and lists Siemens SIMATIC S7-1500 TM MFP - BIOS as the affected product. The source states that no fix is currently available and recommends only building and running applications from trusted sources. No additional exploit details are included here.

Sources and references

Verified primary and authoritative sources

  • CVE-2024-41046 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2024-41046

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2024-41046 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2024-41046

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-072-03.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-503939.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-503939.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-03

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.