These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A null pointer dereference vulnerability exists in the Linux kernel's ts2020 media driver, specifically within the ts2020_probe() function. This flaw can lead to a denial-of-service condition when exploited by a local attacker with low privileges. The vulnerability affects Siemens industrial networking products running SINEC OS, including the RUGGEDCOM RST2428P and multiple SCALANCE switch families. Sieme [truncated]
CVE-2024-56572 is a memory leak vulnerability in the Allegro DVT media platform driver, specifically within the `allocate_buffers_internal()` function. The issue occurs when a buffer allocated within a loop is not properly released under exception paths, leading to resource exhaustion over time. This vulnerability affects Siemens industrial networking products running SINEC OS, including the RUGGEDCOM RST [truncated]
A vulnerability in the Linux kernel's overlayfs (ovl) subsystem allows directory inodes lacking a lookup function to be processed, causing errors when passed to the lowerstack. The issue was resolved by adding a check to the ovl_dentry_weird() function to filter such invalid inodes. Siemens has identified affected products in its industrial networking portfolio and provided vendor fixes.
CVE-2024-56567 is a division-by-zero vulnerability in the Linux kernel's AD7780 analog-to-digital converter driver. The flaw exists in the `ad7780_write_raw()` function where the `val2` parameter can be zero, leading to a division-by-zero error when passed to `DIV_ROUND_CLOSEST()`. While `val` is explicitly documented as potentially zero (for read mode), `val2` lacks such specification, creating an unhand [truncated]
A memory leak vulnerability exists in the Linux kernel's I3C (Improved Inter-Integrated Circuit) subsystem. Specifically, the function i3c_master_put_i3c_addrs() fails to free the init_dyn_addr memory allocation, leading to a resource leak. This vulnerability affects Siemens industrial networking products running SINEC OS, including the RUGGEDCOM RST2428P and SCALANCE switch families. The flaw requires lo [truncated]
CVE-2024-56558 is a use-after-free vulnerability in the Linux kernel's NFS server (nfsd) subsystem. The flaw exists in the `e_show` function, which is called with RCU (Read-Copy-Update) protection. While RCU ensures that the `exp` (export) structure will not be freed during execution, it does not prevent the reference count from dropping to zero. When `exp_get` is subsequently called, this triggers a refc [truncated]
CVE-2024-56548 is a medium-severity vulnerability (CVSS 5.5) in the Linux kernel's hfsplus filesystem driver, published on 2025-08-12 and last modified on 2026-02-25. The vulnerability stems from a block size mismatch condition: when a loop device's block size is modified via the LOOP_SET_BLOCK_SIZE ioctl, the hfsplus driver may allocate memory based on the new block size but subsequently perform I/O oper [truncated]
CVE-2024-56539 is a vulnerability in the Linux kernel's mwifiex wireless driver, specifically a memcpy() field-spanning write warning in the mwifiex_config_scan() function. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. Siemens has identified this CVE as applicable to certain industrial networking products running SINEC OS, including the RUGGEDCOM RST2428P and SCALANCE X-fa [truncated]
CVE-2024-56532 describes a vulnerability in the ALSA us122l driver where snd_card_free() is used at disconnection, which waits for all used file descriptors to close. This can cause extended delays that block upper-layer USB ioctls and potentially trigger a soft lockup. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. Siemens has identified this CVE as affecting their RUGGEDC [truncated]
CVE-2024-5535 is a medium-severity issue in Siemens SIDIS Prime tied to direct use of OpenSSL’s SSL_select_next_proto with an empty supported client protocols buffer. According to the advisory, that can lead to a buffer overread, a crash, or disclosure of up to 255 bytes of memory to the peer. The advisory says the vulnerable scenario usually comes from a configuration or programming error rather than nor [truncated]
CVE-2024-54678 is a high-severity local privilege escalation vulnerability in Siemens industrial automation software, published on 2025-08-12 and last modified on 2025-12-09. The vulnerability stems from improper sanitization of Interprocess Communication (IPC) input received through a Windows Named Pipe that is accessible to all local users. An authenticated local attacker can exploit this type confusion [truncated]
A medium-severity vulnerability in the Linux kernel's IP Virtual Server (IPVS) subsystem affects Siemens industrial networking products. The flaw involves uninitialized stack memory access in ip_vs_protocol_init(), which can lead to undefined behavior and potential denial of service. The vulnerability requires local access with low privileges and has been addressed through vendor firmware updates.
CVE-2024-53241 is a vulnerability in the x86/xen PV iret hypercall implementation. The issue stems from problems with the PV iret hypercall through the hypercall page, which was addressed by directly coding the sequence in xen-asm.S to avoid complications with speculation mitigations. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. Siemens has identified this CVE as affectin [truncated]
CVE-2024-53240 is a vulnerability in the Xen netfront driver that causes a system crash when removing a device after a suspend/resume cycle. The root cause is uninitialized queues; the fix involves checking for queue existence before attempting to stop them. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. Siemens ProductCERT issued advisory SSA-355557, which CISA republished [truncated]
CVE-2024-53239 is a use-after-free (UAF) vulnerability in the Linux ALSA 6fire USB audio driver. The flaw occurs when the driver attempts to release resources immediately after calling usb6fire_chip_abort(), while the card object may still be in use via snd_card_free_when_closed(). This timing window creates a potential UAF condition. The vulnerability was published on 2025-08-12 and last modified on 2026 [truncated]
A use-after-free vulnerability exists in the Bluetooth subsystem's device_for_each_child function, where a device may be accessed after it has been freed, potentially leading to a dangling pointer and system instability. This vulnerability was initially reported as affecting Siemens industrial networking products running SINEC OS, including the RUGGEDCOM RST2428P and SCALANCE X-300/XR-300/XC-400/XR-500WG/ [truncated]
CVE-2024-53227 describes a use-after-free vulnerability in the Linux kernel's SCSI BFA (Brocade Fibre Channel HBA) driver, specifically within the bfad_im_module_exit() function. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. CISA's advisory ICSA-25-226-07, which was republished on 2026-02-25 based on Siemens ProductCERT advisory SSA-355557, lists this CVE as affecting Siem [truncated]
CVE-2024-53226 is a NULL pointer dereference vulnerability in the RDMA/hns driver, specifically within the hns_roce_map_mr_sg() function. The issue arises because ib_map_mr_sg() permits upper layer protocols to pass NULL as the sg_offset argument, and the driver fails to validate this before dereferencing. This vulnerability affects Siemens industrial networking products running SINEC OS, including the RU [truncated]
CVE-2024-53217 is a NULL pointer dereference vulnerability in the Linux kernel's NFS server (NFSD) implementation, specifically within the nfsd4_process_cb_update() function. The vulnerability was resolved in the upstream Linux kernel. Siemens has assessed this CVE as 'Misinformed' for its affected product lines, indicating that the vulnerability does not actually impact the listed Siemens industrial netw [truncated]
A use-after-free vulnerability in the Linux kernel's PCI subsystem affects Siemens industrial networking products. The flaw occurs during hot removal of USB4 docks when pci_slot and pci_bus references are improperly handled, potentially causing system crashes. The vulnerability is rated MEDIUM severity (CVSS 5.5) with local attack vector and low attack complexity. Affected products include RUGGEDCOM RST24 [truncated]
CVE-2024-53184 is a medium-severity vulnerability (CVSS 5.5) affecting the Linux kernel's User-Mode Linux (UML) block device driver (ubd). The issue stems from improper handling of driver data (drvdata) during device release operations, which can lead to a denial-of-service condition. The vulnerability was published on August 12, 2025, and last modified on February 25, 2026. Siemens has identified this vu [truncated]
A vulnerability in the Linux kernel's User-Mode Linux (UML) network driver could allow a local attacker to cause a denial of service condition. The issue stems from improper handling of driver data during release operations in the UML network subsystem.
A vulnerability in the Linux kernel's User-Mode Linux (UML) vector driver could allow a local attacker to cause a denial of service condition. The issue stems from improper handling of driver data during release operations, where drvdata is not available when expected. This affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST2428P and SCALANCE switch families. Th [truncated]
CVE-2024-53174 is a use-after-free vulnerability in the Linux kernel's SUNRPC subsystem affecting Siemens industrial networking products. The flaw exists in the `c_show` function, which is called with RCU (Read-Copy-Update) protection. While RCU ensures that the cache pointer `cp` will not be freed during access, it does not prevent the reference count from dropping to zero. When `cache_get` is subsequent [truncated]
A use-after-free vulnerability exists in the Linux kernel's NFSv4.0 client implementation. When two threads concurrently open files and are forced to abort before receiving a reply, the nfs_release_seqid() call in nfs4_opendata_free() can dereference a freed pointer to a defunct RPC task from the other thread. This condition requires local access with low privileges, high attack complexity, and can result [truncated]
A vulnerability in the Linux kernel's UBI (Unsorted Block Images) fastmap subsystem allows duplicate slab cache names to be detected, triggering a kernel WARNING. This issue affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST2428P and SCALANCE X-family switches. The vulnerability requires local access with low privileges and can result in high availability impac [truncated]
This CVE addresses a use-after-free vulnerability in the UBIFS (Unsorted Block Image File System) authentication subsystem within the Linux kernel. The flaw occurs during TNC (Tree Node Cache) operations where tree structure changes after node insertion can lead to stale parent pointer references. Specifically, when the tree splits during insertion, a node's `znode->parent` may change, but its `znode->cpa [truncated]
A use-after-free vulnerability exists in the Linux kernel's SuperH (sh) architecture interrupt controller (intc) subsystem. The flaw occurs in register_intc_controller() where a data structure is added to a global list before initialization completes; if an error occurs during setup, the structure is freed while still referenced in intc_list, leading to memory corruption. This vulnerability affects Siemen [truncated]
CVE-2024-53161 is a medium-severity integer overflow vulnerability in the EDAC/bluefield kernel component affecting Siemens industrial networking products. The flaw stems from a 32-bit mem_ctrl_idx variable being left-shifted 16 bits when constructing a 64-bit SMC (Secure Monitor Call) argument for retrieving DIMM information. This truncation causes loss of the upper 16 bits of data, potentially leading t [truncated]
CVE-2024-53158 is a medium-severity array underflow vulnerability in the Qualcomm GENI Serial Engine (geni-se) driver within the Linux kernel. The flaw exists in the geni_se_clk_tbl_get() function, where a loop condition intended to detect unchanged frequency values from clk_round_rate() is evaluated on the first iteration. This causes an out-of-bounds read before the start of the these->clk_perf_tbl[] ar [truncated]