These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2024-50251 is a vulnerability in the Linux kernel's netfilter subsystem, specifically within the nft_payload module. The issue occurs when offset and length parameters are not properly sanitized before calling skb_checksum(). If the combined offset and length exceed the actual skbuff (socket buffer) length, skb_checksum() triggers a BUG_ON() assertion, resulting in a kernel crash and denial of service [truncated]
CVE-2024-50237 is a vulnerability in the Linux kernel's mac80211 wireless subsystem. The issue occurs when the .get_txpower callback passes a stopped virtual interface (vif) to the driver, potentially causing a crash due to uninitialized private data. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. Siemens ProductCERT issued advisory SSA-355557 addressing this CVE, which CIS [truncated]
CVE-2024-50236 is a memory leak vulnerability in the Linux kernel's ath10k Wi-Fi driver affecting management frame transmission. The flaw occurs when memory allocated for MSDU context during management packet transmission is not properly freed during TX completion or cleanup operations. This vulnerability was published on 2025-08-12 and last modified on 2026-02-25. The vulnerability is present in Siemens [truncated]
CVE-2024-50234 is a race condition vulnerability in the Linux kernel's iwlegacy wireless driver affecting the Intel iwl4965 device. The flaw occurs when stale interrupts are not cleared before resuming the device from hibernation, creating a race condition between the resume process and restart work. This vulnerability was published on August 12, 2025, and last modified on February 25, 2026. Siemens has i [truncated]
CVE-2024-50218 describes a potential integer overflow condition in the OCFS2 (Oracle Cluster File System 2) kernel module, specifically in the `ocfs2_truncate_inline` function where a `u64` value is passed. The vulnerability was published on August 12, 2025, and last modified on February 25, 2026. Siemens ProductCERT issued advisory SSA-355557 addressing this vulnerability in their SINEC OS product line, [truncated]
A vulnerability in the nilfs2 filesystem driver of the Linux kernel, where nilfs_find_entry() fails to propagate errors when loading directory pages/folios via nilfs_get_folio(). This error handling omission can lead to task hangs (observed in vcs_open() during fuzzing) when corrupted filesystem images present large directory inode sizes that pass initial reads but fail subsequent sanity checks. The vulne [truncated]
This CVE addresses a validation gap in the Linux kernel's DRM/Radeon subsystem where the `encoder->possible_clones` field was not properly validated during driver initialization. The issue could result in warnings during driver load but does not appear to enable privilege escalation or code execution. The vulnerability is rated MEDIUM severity (CVSS 5.5) with a local attack vector requiring low privileges [truncated]
CVE-2024-50199 is a Linux kernel memory management vulnerability affecting the swapfile subsystem. The issue occurs when HugeTLB (Huge Translation Lookaside Buffer) pages are not properly skipped during the unuse_vma operation, leading to a bad pud (Page Upper Directory) error and potential loss of 1GB HugeTLB pages when swapoff is called. This vulnerability has been identified in Siemens industrial netwo [truncated]
A NULL pointer dereference vulnerability exists in the Linux kernel's Industrial I/O (IIO) light sensor driver for the VEML6030 ambient light sensor. The flaw resides in the `in_illuminance_period_available_show` function, which incorrectly retrieves the IIO device structure from an embedded device pointer. The function receives a `dev` pointer referencing the device embedded within the IIO device rather [truncated]
A missing validation check in the Linux kernel's posix-clock subsystem allows local attackers to trigger a denial-of-service condition. The vulnerability exists in pc_clock_settime() where timespec64 values are not properly validated before use. An attacker with local access can exploit this to cause system instability or crashes.
This CVE describes a vulnerability in the Linux kernel's arm64 uprobes implementation on big-endian kernels. The uprobes code fails to convert in-memory instruction encoding (always little-endian) to the kernel's native endianness before analysis and simulation. This is a kernel-level issue affecting ARM64 architectures running in big-endian mode. The vulnerability was published on 2025-08-12 and last mod [truncated]
CVE-2024-50193 addresses a vulnerability in the x86 32-bit entry code where CPU buffers are cleared after the call to exc_nmi but before register state is restored. This sequencing is insufficient for the RDFS (Register File Data Sampling) mitigation, which requires CPU buffers to be cleared only when registers contain no sensitive data. The fix repositions CLEAR_CPU_BUFFERS to occur after RESTORE_ALL_NMI [truncated]
A memory corruption vulnerability exists in the DP83869 PHY driver within the Linux kernel networking subsystem. The flaw stems from an incorrect API usage where linkmode_set_bit() is called with a bit mask (1 << 10) instead of the expected bit number (10). This error causes memory corruption at an unintended location—specifically, on arm64 architectures, the priv pointer within the same structure is corr [truncated]
A vulnerability in the virtio_pmem driver could allow a local attacker to cause a denial-of-service condition. The flaw exists because the driver fails to check device status before requesting a flush operation. If a pmem device enters a bad state, the driver may wait indefinitely for host acknowledgment in virtio_pmem_flush(), resulting in a system hang. This vulnerability affects Siemens industrial netw [truncated]
A buffer overflow vulnerability exists in the Linux kernel's sisfb framebuffer driver. The strbuf array, sized at 16 bytes, can be overflowed when sprintf() writes formatted resolution values (xres and yres) obtained from strbuf1. If strbuf1 contains non-digit characters including a space, the resulting formatted string can exceed the 16-byte buffer boundary, leading to a local denial-of-service condition [truncated]
CVE-2024-50179 is a medium-severity vulnerability (CVSS 5.5) affecting the Ceph distributed storage system, specifically involving an incorrect Fw reference check when dirtying pages. This flaw could lead to availability impacts on affected systems. The vulnerability was published on August 12, 2025, and most recently modified on February 25, 2026. Siemens has identified this vulnerability as affecting mu [truncated]
CVE-2024-50099 describes broken LDR (literal) uprobe support in the arm64 architecture's probes subsystem. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. Siemens has identified this CVE as affecting certain industrial networking products, specifically the RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family, and SCALANCE XCM-/XRM-/XCH-/XR [truncated]
CVE-2024-50096 describes a vulnerability in the nouveau/dmem component related to migrate_to_ram upon copy error. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. CISA republished this advisory based on Siemens ProductCERT SSA-355557 advisory as of the February 25, 2026 update. The vulnerability affects Siemens industrial networking products including RUGGEDCOM RST2428P (6GK6 [truncated]
A locking contention vulnerability in the Linux kernel's RDMA MAD (Management Datagram) agent timeout handler can cause soft lockups when processing a high volume of timed-out Work Requests (WRs). The original implementation acquired and released the mad_agent_priv lock for each timed-out WR, creating severe contention under load. This manifests during RDMA-CM connection establishment between peer nodes. [truncated]
CVE-2024-50083 is a vulnerability in the Linux kernel's Multipath TCP (MPTCP) implementation that may cause Data Sequence Signal (DSS) corruption due to large Path MTU (PMTU) transmissions. The issue is addressed in the __mptcp_move_skbs_from_subflow function. Siemens has identified this vulnerability as affecting multiple industrial networking products running SINEC OS, including the RUGGEDCOM RST2428P a [truncated]
A race condition vulnerability in the Linux kernel's block request quality-of-service (blk-rq-qos) subsystem can cause system crashes. The flaw exists in the interaction between rq_qos_wait and rq_qos_wake_function, where improper ordering of waitqueue entry access may trigger a crash condition. This vulnerability affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM [truncated]
A use-after-free vulnerability exists in the Switchtec NTB (Non-Transparent Bridge) driver within the Linux kernel. The flaw occurs in the `switchtec_ntb_remove` function due to a race condition, where memory is accessed after it has been freed. This vulnerability is classified as HIGH severity with a CVSS 3.1 score of 7.1. The vulnerability affects Siemens industrial networking products running SINEC OS, [truncated]
This CVE describes a use-after-free (UAF) vulnerability in the Linux kernel's SPI driver for the Freescale/NXP MPC52xx platform. The issue occurs in the `mpc52xx_spi_remove` function when a kernel module is unloaded: the driver's private data structure (`ms`) is freed via `spi_unregister_controller`, but a pending work item (`ms->work`) may still be scheduled for execution, leading to memory corruption an [truncated]
CVE-2024-50049 is a null pointer dereference vulnerability in the AMD display driver subsystem (drm/amd/display). The vulnerability occurs when dereferencing a 'se' pointer without prior null validation, potentially leading to system instability or denial of service conditions. This vulnerability was originally identified in the Linux kernel's AMD GPU display driver code and has been identified as affecti [truncated]
A NULL-pointer dereference vulnerability exists in the Linux kernel's NFSv4 implementation, specifically within the nfs42_complete_copies() function. This flaw can trigger a kernel crash when files are copied between locations on the same NFS server from an NFS client node. The vulnerability has been resolved in the upstream Linux kernel. Siemens has identified affected products in its industrial networki [truncated]
A vulnerability in the Linux kernel's netfilter br_netfilter subsystem could cause a kernel panic when processing skbs with metadata_dst. This affects Siemens industrial networking products running SINEC OS. The issue has been resolved in the upstream Linux kernel. Siemens has released updates to address this vulnerability in affected RUGGEDCOM and SCALANCE product families.
CVE-2024-50044 describes a possible deadlock condition in the Linux kernel's Bluetooth RFCOMM subsystem. The vulnerability exists because `rfcomm_sk_state_change` attempts to acquire `sock_lock`, but must never be called with that lock already held. However, `rfcomm_sock_ioctl` always attempts to lock `sock_lock` before calling `rfcomm_sk_state_change`, creating a potential deadlock scenario. This is a cl [truncated]
A vulnerability in the Linux kernel's igb (Intel Gigabit Ethernet) driver could allow an attacker to cause a denial-of-service condition. The issue occurs when the driver incorrectly brings the device back up after a non-fatal error, potentially leading to system instability or network disruption. This affects Siemens industrial networking products that incorporate the vulnerable kernel component.
A vulnerability in the Linux kernel's network scheduler (net/sched) allows local attackers to cause a denial of service (system crash) by exploiting improper handling of the TCA_STAB parameter on non-root queueing disciplines (qdiscs). The issue stems from an assumption that packet length remains invariant between enqueue() and dequeue() handlers, which fails when TCA_STAB is applied to child qdiscs rathe [truncated]
A use-of-uninitialized-value vulnerability exists in the Linux kernel's PPP (Point-to-Point Protocol) asynchronous framing implementation. The flaw occurs in ppp_async_encode() when processing empty socket buffers (skb) sent via PPPoE with zero-length payloads. An attacker with local access can trigger this condition to read uninitialized kernel memory, potentially exposing sensitive information or causin [truncated]