These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2024-50033 is a HIGH-severity vulnerability (CVSS 7.1) in the Linux kernel's SLIP/PPP header compression code. The flaw exists in `slhc_remember()` within `drivers/net/slip/slhc.c`, which performed insufficient validation on incoming packets. The function only verified that packets were at least 20 bytes, failing to ensure that IPv4 and TCP headers were actually present and properly formed. This defic [truncated]
CVE-2024-50024 is a medium-severity vulnerability (CVSS 5.5) affecting Siemens industrial networking products, specifically the RUGGEDCOM RST2428P and SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 and XCM-/XRM-/XCH-/XRH-300 families. The vulnerability, described as an unsafe loop on a list in the networking component, was published on August 12, 2025, and last modified on February 25, 2026. The issue stem [truncated]
CVE-2024-50015 is a medium-severity vulnerability in the ext4 filesystem's Direct Access (DAX) implementation that can cause extent overflows beyond inode size during partial write operations. The vulnerability was published on August 12, 2025, and affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST2428P and SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family a [truncated]
A memory leak vulnerability exists in the Linux kernel's exFAT filesystem implementation, specifically within the exfat_load_bitmap() function. The flaw occurs when the first directory entry in the root directory is not a bitmap directory entry, causing the 'bh' (buffer head) variable to not be released and reassigned, resulting in a memory leak. This vulnerability has been identified as affecting Siemens [truncated]
CVE-2024-50008 is a vulnerability in the Linux kernel's mwifiex wireless driver, specifically in the `mwifiex_cmd_802_11_scan_ext()` function. The issue involves a `memcpy()` field-spanning write warning due to improper array handling in `struct host_cmd_ds_802_11_scan_ext`. The fix replaces a one-element array with a flexible-array member to address the memory safety concern. This CVE was published on Au [truncated]
CVE-2024-50007 describes a potential out-of-bounds (OOB) array access vulnerability in the ALSA ASIHPI driver. The driver stores values in a static array based on an index derived from firmware responses, which could lead to memory corruption if the firmware provides an invalid index. This vulnerability was published on 2025-08-12 and last modified on 2026-02-25. The issue affects Siemens industrial netwo [truncated]
CVE-2024-50006 is a medium-severity vulnerability (CVSS 5.5) in the Linux kernel's ext4 filesystem, specifically affecting the `ext4_ind_migrate()` function. The issue involves an incorrect unlock order for the `i_data_sem` semaphore, which could lead to a deadlock condition. This vulnerability was resolved in the Linux kernel, and Siemens has identified affected products in their industrial networking eq [truncated]
CVE-2024-50001 is a vulnerability in the Linux kernel's Mellanox mlx5 network driver affecting multi-packet WQE (Work Queue Element) transmit operations. The flaw occurs in the error handling path when DMA mapping fails due to memory pressure or IOMMU page table exhaustion. The vulnerable code erroneously unmaps an entry from the send queue's FIFO list of active DMA mappings even though no mapping was est [truncated]
A memory disclosure vulnerability exists in the Linux kernel's Lantiq ETOP Ethernet driver (lantiq_etop). When padding Ethernet frames to meet minimum size requirements, the driver fails to zero the buffer before transmission, causing uninitialized kernel memory to be observable on the network wire. This affects Siemens industrial networking products that incorporate vulnerable kernel versions, including [truncated]
CVE-2024-49985 is a medium-severity (CVSS 5.5) deadlock vulnerability in the STM32F7 I2C driver affecting Siemens industrial networking products. The flaw occurs when a clock controller attached to the I2C bus controller—such as a Versaclock or AIC32x4 I2C codec—triggers an I2C transfer from within the clock controller's clk_ops .prepare callback. This sequence can cause a deadlock on the drivers/clk/clk. [truncated]
This CVE addresses a double-free vulnerability in the Linux ext4 filesystem, specifically within the ext4_ext_replay_update_ex() function. The flaw occurs when ext4_force_split_extent_at() is called: the 'ppath' variable is updated, but the original 'path' variable is freed instead, creating conditions for a double-free memory corruption. This vulnerability has been identified as affecting Siemens industr [truncated]
CVE-2024-49982 is a HIGH severity (CVSS 7.8) use-after-free vulnerability in the Linux kernel's ATA over Ethernet (AoE) driver. The vulnerability stems from improper reference counting of network device structures (skb->dev) when transmitting packets via aoenet_xmit(). A previous fix for CVE-2023-6270 moved dev_put() calls to the tx() function without adding corresponding dev_hold() calls in multiple AoE [truncated]
A race condition in the Venus media driver (venus_remove) can trigger use-after-free memory corruption, leading to local denial of service. The vulnerability requires low attack complexity and local access with low privileges, but no user interaction. Siemens has confirmed this Linux kernel issue affects select industrial networking products running SINEC OS.
A zero-division vulnerability exists in the Linux kernel's stmmac (Synopsys DesignWare Ethernet MAC) driver. When tc-cbs (Traffic Control - Credit Based Shaper) is disabled, the `port_transmit_rate_kbps` variable can be set to 0, which is then passed to the `div_s64` function, causing a divide-by-zero error. This is a local attack vector requiring low privileges and low attack complexity, resulting in hig [truncated]
CVE-2024-49975 is a medium-severity vulnerability in the Linux kernel's uprobes subsystem affecting Siemens industrial network devices running SINEC OS. The flaw exists in the xol_add_vma() function, which maps an uninitialized page allocated by __create_xol_area() into userspace. On x86 architectures, this memory is readable even without VM_READ permission, and setting VM_EXEC produces the same page prot [truncated]
This CVE describes a buffer overrun vulnerability in the AMD Display Core (DC) driver within the Linux kernel's Direct Rendering Manager (DRM) subsystem. Specifically, functions `dml2_core_shared_mode_support` and `dml_core_mode_support` access the third element of `dummy_boolean` (e.g., `hw_debug5 = &s->dummy_boolean`), and any assignment through this pointer would cause an OVERRUN condition. The vulnera [truncated]
CVE-2024-49969 describes an index out of bounds vulnerability in the DCN30 color transformation code within the AMD display driver (drm/amd/display). The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. According to the CISA CSAF advisory ICSA-25-226-07, this CVE is categorized as **Misinformed** for the listed Siemens products, indicating the vulnerability does not actually affe [truncated]
CVE-2024-49966 describes a use-after-free condition in the Linux kernel's OCFS2 (Oracle Cluster File System 2) quota subsystem. The vulnerability occurs when ocfs2_global_read_info() initializes and schedules dqi_sync_work at the end of its execution, but the work is not cancelled before freeing the oinfo structure. This can lead to memory corruption if the work item executes after the structure has been [truncated]
CVE-2024-49965 is a vulnerability in the OCFS2 (Oracle Cluster File System 2) Linux kernel driver, specifically in the ocfs2_read_blocks function. The issue involves an unreasonable unlock operation that could lead to race conditions or improper synchronization. The vulnerability was published on August 12, 2025, and last modified on February 25, 2026. Siemens has identified this CVE as affecting certain [truncated]
A vulnerability in the Broadcom BCM2835 mailbox driver affects Siemens industrial networking products running SINEC OS. The flaw causes a timeout during system suspend mode, potentially leading to denial of service conditions. The vulnerability requires local access with low privileges and has been assigned a CVSS 3.1 score of 5.5 (Medium severity). Siemens has released firmware updates to address this is [truncated]
A vulnerability in the Linux kernel's jbd2 (journaling block device 2) subsystem affects Siemens industrial networking products. The flaw occurs in __jbd2_log_wait_for_space(), where the function may continue waiting for journal space even when jbd2_cleanup_journal_tail() returns an error, potentially leading to a denial-of-service condition. This is a local vulnerability requiring low privileges with no [truncated]
This CVE was published on 2025-08-12 and last modified on 2026-02-25. The vulnerability description indicates an issue in the ocfs2 filesystem related to reserving space for inline extended attributes before attaching a reflink tree. The source advisory (ICSA-25-226-07) from CISA, based on Siemens ProductCERT advisory SSA-355557, lists this CVE as affecting Siemens industrial networking products including [truncated]
CVE-2024-49957 is a null pointer dereference vulnerability in the OCFS2 (Oracle Cluster File System 2) Linux kernel module, triggered when journal loading fails. The vulnerability was published on August 12, 2025, and last modified on February 25, 2026. Siemens ProductCERT issued advisory SSA-355557 addressing third-party components in SINEC OS, which includes this kernel-level issue. CISA republished the [truncated]
CVE-2024-49955 is a medium-severity vulnerability (CVSS 5.5) in the Linux kernel's ACPI battery subsystem. The flaw occurs when a battery hook returns an error during battery registration, causing automatic unregistration that the hook provider is unaware of. When the provider subsequently calls battery_hook_unregister() on the already-unregistered hook, a crash results. The fix uses the list head to mark [truncated]
A vulnerability in the Linux kernel's netfilter nf_tables subsystem could allow corruption of nf_skb_duplicated data structures. This issue affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST2428P and SCALANCE X family switches. The vulnerability has been resolved in the upstream Linux kernel. Siemens has released firmware updates to address this issue in affected products.
CVE-2024-49949 is a medium-severity vulnerability in the Linux kernel's networking subsystem, specifically within the `qdisc_pkt_len_init()` function when handling UFO (UDP Fragmentation Offload) packets. The issue involves a potential integer underflow that could lead to denial of service conditions. The vulnerability was resolved in the upstream Linux kernel. Siemens has identified affected products in [truncated]
A vulnerability in the Linux kernel's network queueing discipline (qdisc) subsystem has been identified and resolved. The issue, addressed by adding additional sanity checks to the qdisc_pkt_len_init() function, could potentially lead to denial of service conditions. Siemens has confirmed this vulnerability affects multiple industrial networking product families including RUGGEDCOM RST2428P, SCALANCE XC-3 [truncated]
A NULL pointer dereference vulnerability exists in the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation. When sctp_listen_start() is invoked by sctp_inet_listen(), a failure in sctp_autobind() leaves the socket state incorrectly set to LISTENING rather than CLOSED. On subsequent calls to sctp_inet_listen(), if SCTP_REUSE_PORT has been configured via setsockopt, the code dereferenc [truncated]
CVE-2024-49938 is a vulnerability in the Linux kernel's ath9k_htc WiFi driver, specifically affecting the handling of socket buffer (SKB) length operations during USB host interface operations. The issue stems from improper initialization of SKB length fields in error paths, where skb_trim() performs sanity checks on potentially uninitialized length values. The vulnerability was resolved by replacing skb_ [truncated]
A use-after-free (UAF) vulnerability exists in the Linux kernel's Xen netback driver (net/xen-netback). The flaw occurs in the xenvif_flush_hash() function during list_for_each_entry_rcu iteration, where kfree_rcu is not properly protected within the RCU read critical section. If kfree_rcu is invoked when the RCU grace period ends during iteration, accessing head->next after the entry becomes free results [truncated]