PatchSiren cyber security CVE debrief

CVE-2024-50237 Siemens CVE debrief

CVE-2024-50237 is a vulnerability in the Linux kernel's mac80211 wireless subsystem. The issue occurs when the .get_txpower callback passes a stopped virtual interface (vif) to the driver, potentially causing a crash due to uninitialized private data. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. Siemens ProductCERT issued advisory SSA-355557 addressing this CVE, which CISA subsequently republished as ICSA-25-226-07. The advisory was updated multiple times, with the most recent revision on 2026-02-25 clarifying affected product configurations and removing rejected CVEs from earlier versions. Siemens has assessed the impact as 'Misinformed' for the listed product IDs, indicating this CVE does not affect the specified Siemens products in the manner originally reported or the products are not vulnerable to this issue. No CVSS score or severity rating is available in the source data.

Vendor: Siemens
Product: RUGGEDCOM RST2428P (6GK6242-6PA00)
CVSS: HIGH 7.8
CISA KEV: Not listed in stored evidence
Original CVE published: 2025-08-12
Original CVE updated: 2026-02-25
Advisory published: 2025-08-12
Advisory updated: 2026-02-25

Who should care

Organizations running Linux-based systems with mac80211 wireless drivers, particularly industrial operators using Siemens SCALANCE or RUGGEDCOM networking equipment, should verify their exposure. However, Siemens has assessed this CVE as 'Misinformed' impact for their listed products, suggesting the vulnerability does not affect these products as originally reported.

Technical summary

The vulnerability exists in the Linux kernel's mac80211 wireless networking subsystem. When the .get_txpower callback is invoked, it may pass a stopped virtual interface (vif) to the underlying driver. This can result in the driver accessing uninitialized private data structures, potentially causing a kernel crash. The fix prevents passing stopped vifs to drivers in this code path.

Defensive priority

low

Recommended defensive actions

Review Siemens ProductCERT advisory SSA-355557 for definitive product impact assessment
Verify mac80211/wireless driver versions in use if running Linux-based systems with wireless interfaces
Apply kernel updates from distribution maintainers when available
Monitor CISA ICS advisories for updates to ICSA-25-226-07

Evidence notes

The source CISA CSAF advisory ICSA-25-226-07 (revision 4, 2026-02-25) indicates Siemens assessed impact as 'Misinformed' for product IDs CSAFPID-0006, CSAFPID-0002, and CSAFPID-0003. The CVE description describes a kernel-level mac80211 issue with stopped vif handling. No CVSS vector or score is present in source data.

Sources and references

Verified primary and authoritative sources

CVE-2024-50237 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2024-50237

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2024-50237 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2024-50237

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source item URL
Unverified legacy reference

URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-226-07.json

cisa_csaf
Source reference
Unverified legacy reference

URL: https://cert-portal.siemens.com/productcert/csaf/ssa-355557.json

Reference
Source reference
Unverified legacy reference

URL: https://cert-portal.siemens.com/productcert/html/ssa-355557.html

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/topics/industrial-control-systems

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.