These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A vulnerability in the Linux kernel's ARM SCPI (System Control and Power Interface) firmware driver could allow a local attacker to cause a denial of service (kernel crash). The flaw occurs when the SCPI firmware returns an Operating Performance Points (OPP) count of zero, which is not properly validated, leading to a kernel crash. This vulnerability affects Siemens industrial networking products running [truncated]
CVE-2024-53156 is a vulnerability in the Linux kernel's ath9k wireless driver, specifically in the htc_connect_service() function. The issue involves a missing range check for the conn_rsp_epid parameter, which could lead to improper validation of endpoint IDs during HTC (Host/Target Communication) service connection. This vulnerability was published on August 12, 2025, and last modified on February 25, 2 [truncated]
CVE-2024-53155 describes an uninitialized value vulnerability in the ocfs2_file_read_iter() function within the OCFS2 (Oracle Cluster File System 2) kernel module. The vulnerability was published on August 12, 2025, and last modified on February 25, 2026. Siemens has identified this CVE as affecting third-party components in SINEC OS, specifically impacting RUGGEDCOM RST2428P (6GK6242-6PA00) and other ind [truncated]
CVE-2024-53148 is a HIGH severity vulnerability (CVSS 7.0) in the Linux kernel's comedi subsystem affecting Siemens industrial networking products. The flaw occurs when remap_pfn_range() calls partially succeed before failing, leaving buffer pages mapped in userspace page tables. When comedi_buf_map_put(bm) drops the buffer reference, these mappings persist until later cleanup in the mmap error path, crea [truncated]
CVE-2024-53146 is an integer overflow vulnerability in the Linux kernel's NFS server (NFSD) implementation, specifically within the `decode_cb_compound4res()` function. The flaw occurs when processing NFSv4 callback compound responses: if a tag length value is greater than or equal to U32_MAX - 3, the subsequent arithmetic operation `length + 4` causes an integer overflow. This vulnerability was published [truncated]
CVE-2024-53145 is a medium-severity integer overflow vulnerability in the Linux kernel's User-Mode Linux (UML) subsystem, specifically affecting the physical memory (physmem) setup process. The vulnerability occurs when the real map size exceeds LONG_MAX, which can be readily triggered on UML/i386 architectures. While this vulnerability originates in the Linux kernel, it affects Siemens industrial network [truncated]
This CVE addresses an uninitialized variable vulnerability in the Linux kernel's OCFS2 filesystem. The `ocfs2_setattr()` function was using `attr->ia_mode`, `attr->ia_uid`, and `attr->ia_gid` in a trace point without verifying that the corresponding `ATTR_MODE`, `ATTR_UID`, and `ATTR_GID` flags were actually set in the attribute mask. This could lead to use of uninitialized kernel values. The fix ensures [truncated]
CVE-2024-53097 is a low-severity vulnerability (CVSS 3.3) in the Linux kernel's memory management subsystem, specifically affecting the krealloc function. The issue involves a Memory Tagging Extension (MTE) false alarm in __do_krealloc, which can trigger incorrect memory safety warnings. Siemens has identified this vulnerability as affecting multiple industrial networking products running SINEC OS, includ [truncated]
CVE-2024-53066 describes a KMSAN (Kernel Memory Sanitizer) warning in the Linux kernel's NFS client implementation, specifically within the decode_getfattr_attrs() function. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. The source advisory (ICSA-25-226-07) from CISA's CSAF repository indicates this issue affects Siemens industrial networking products running SINEC OS, incl [truncated]
CVE-2024-53060 describes a NULL pointer dereference vulnerability in the Linux kernel's drm/amdgpu driver. The issue occurs when acpi_evaluate_object() returns AE_NOT_FOUND, which could lead to a NULL pointer dereference if not properly handled. The vulnerability is mitigated by bailing out when this status is encountered. This CVE was published on 2025-08-12 and last modified on 2026-02-25. The vulnerabi [truncated]
CVE-2024-53059 is a vulnerability in the Linux kernel's Intel wireless (iwlwifi) driver, specifically in the `iwl_mvm_send_recovery_cmd()` function within the mvm (multi-VM) module. The issue involves two related problems: failure to validate the size of response packets and failure to free the response buffer after use. These defects could potentially lead to memory corruption or resource exhaustion cond [truncated]
CVE-2024-53057 is a vulnerability in the Linux kernel's network scheduler (net/sched) subsystem. The issue involves improper handling in the qdisc_tree_reduce_backlog function, which fails to stop processing at TC_H_ROOT as intended. This flaw can lead to use-after-free conditions in the kernel's traffic control queue discipline implementation. The vulnerability has a CVSS 3.1 score of 5.5 (MEDIUM severit [truncated]
CVE-2024-53052 is a medium-severity vulnerability (CVSS 5.5) in the Linux kernel's io_uring subsystem, specifically affecting how O_DIRECT writes are handled. The flaw occurs because io_uring fails to check for the IOCB_NOWAIT flag when initiating O_DIRECT write operations. This omission can lead to deadlocks when a mount point is being frozen, as the write operation may block indefinitely waiting for I/O [truncated]
A vulnerability in the Linux kernel's igb (Intel Gigabit Ethernet) driver could allow invalid memory access when the driver fails to initialize. The issue occurs because the dca_notifier (Direct Cache Access notifier) is not unregistered if pci_register_driver() fails during module initialization. This can lead to use-after-free or invalid memory access when the notifier is subsequently called. The vulner [truncated]
CVE-2024-50602 is a medium-severity vulnerability (CVSS 5.5) in libexpat before version 2.6.4, where the XML_ResumeParser function can crash when XML_StopParser is called to stop or suspend a parser that has not yet been started. This issue was published on August 12, 2025, and last modified on February 25, 2026. The vulnerability affects Siemens industrial networking products including the RUGGEDCOM RST2 [truncated]
A vulnerability in the Linux kernel's IPv4 IP tunnel implementation (ip_tunnel_find()) could allow a local attacker to cause a denial of service condition. The issue involves suspicious RCU (Read-Copy-Update) usage that may lead to system instability. Siemens has identified this vulnerability as affecting multiple industrial networking products running SINEC OS, including RUGGEDCOM RST2428P switches and S [truncated]
A slab-out-of-bounds memory access vulnerability exists in the Linux kernel's security/keys subsystem, specifically within the key_task_permission function. This flaw can lead to information disclosure and denial of service conditions. The vulnerability affects Siemens industrial networking products running SINEC OS, including RUGGEDCOM RST2428P switches and multiple SCALANCE product families. Local attac [truncated]
A vulnerability in the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation has been resolved. The flaw existed in the sctp_sf_ootb() function, which did not properly validate chunk sizes. This could lead to out-of-bounds access conditions when processing malformed SCTP packets. The vulnerability affects Siemens industrial networking products that incorporate the vulnerable Linux kern [truncated]
A race condition in the hns3 Ethernet driver can cause a kernel crash when the driver is uninstalled while a Virtual Function (VF) is being disabled concurrently. This vulnerability affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST2428P and SCALANCE switch families. The issue is local in scope, requiring low privileges and no user interaction, but results in h [truncated]
A vulnerability in the ARCnet network driver (net: arc) of the Linux kernel generates a warning condition when the network device structure (ndev->dev) and platform device structure (pdev->dev) reference different devices. This condition can lead to local denial of service through system instability or warning floods. The vulnerability requires local access with low privileges and no user interaction. Sie [truncated]
CVE-2024-50290 is a medium-severity vulnerability in the Linux kernel's cx24116 media driver, affecting Siemens industrial networking products. The flaw involves an integer underflow in Signal-to-Noise Ratio (SNR) calculations when register reads fail, returning negative values that cause arithmetic underflow. This local attack vector requires low privileges and no user interaction, with high availability [truncated]
A division-by-zero vulnerability exists in the Linux kernel's Video4Linux2 Test Pattern Generator (v4l2-tpg). The flaw occurs in the `tpg_precalculate_line()` function, which blindly rescales a buffer without validating that `scaled_width` is non-zero. This condition, detected by Coverity static analysis, can trigger a kernel crash when exploited by a local attacker with low privileges. The vulnerability [truncated]
CVE-2024-50279 is a medium-severity vulnerability (CVSS 5.5) in the Linux kernel's device-mapper cache (dm-cache) subsystem. The flaw involves an index bug in bitset iteration that causes out-of-bounds access to the dirty bitset when resizing dm-cache, specifically when shrinking the fast device and checking dirty bits of cache blocks to be dropped. This vulnerability was published on August 12, 2025, and [truncated]
CVE-2024-50278 is a HIGH severity vulnerability (CVSS 7.1) in the Linux kernel's device-mapper cache (dm cache) subsystem. The flaw involves a potential out-of-bounds access that occurs if the fast device is expanded unexpectedly before the first-time resume of the cache table. This vulnerability affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST2428P, SCALANCE [truncated]
CVE-2024-50273 is a vulnerability in the Linux kernel's Btrfs filesystem implementation, specifically within the delayed reference handling code. The issue occurs in `insert_delayed_ref()` when updating an existing reference's action to `BTRFS_DROP_DELAYED_REF`. The code uses `list_del()` to remove the reference from its ref head's `ref_add_list`, but fails to reinitialize the reference's `add_list` membe [truncated]
A use-after-free vulnerability exists in the USB MUSB (Multipoint USB) driver for Allwinner sunxi platforms within the Linux kernel. The flaw occurs when the USB PHY (physical layer) is accessed after it has been released, specifically through the `glue->xceiv` pointer. A local attacker with low privileges could exploit this to cause a denial of service (system crash or instability) on affected systems. T [truncated]
CVE-2024-50268 is a medium-severity out-of-bounds access vulnerability in the Linux kernel's USB Type-C UCSI (USB Type-C Connector System Software Interface) driver, specifically within the `ucsi_ccg_update_set_new_cam_cmd()` function. The vulnerability stems from insufficient bounds checking on the `new_cam` parameter, which is derived from user-controllable input via debugfs. The `*cmd` variable can be [truncated]
A use-after-free vulnerability exists in the Linux kernel USB serial io_edgeport driver. The flaw occurs when `dev_dbg(&urb->dev->dev, ...)` is called after `usb_free_urb(urb)`, resulting in a use-after-free of the `urb` pointer. This vulnerability affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST2428P and SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family a [truncated]
A Use-After-Free vulnerability exists in the Linux kernel's vsock/virtio subsystem, specifically in the handling of the vsk->trans pointer during loopback communication. The vulnerability stems from improper initialization of this pointer, which can result in a dangling pointer condition. This flaw is exploitable locally with low attack complexity and low privileges required, potentially leading to a deni [truncated]
CVE-2024-50262 is a medium-severity (CVSS 5.5) out-of-bounds write vulnerability in the Linux kernel's BPF (Berkeley Packet Filter) subsystem, specifically within the `trie_get_next_key()` function. The vulnerability was resolved in the upstream Linux kernel. Siemens has identified this CVE as affecting multiple industrial networking products running SINEC OS, including the RUGGEDCOM RST2428P and SCALANCE [truncated]