These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2024-49933 is a medium-severity vulnerability (CVSS 5.5) affecting the blk_iocost component in the Linux kernel, specifically involving out-of-bounds shift operations. The vulnerability was published on August 12, 2025, and last modified on February 25, 2026. Siemens has identified this vulnerability as affecting multiple industrial networking products including the RUGGEDCOM RST2428P, SCALANCE XC-300 [truncated]
CVE-2024-49930 is an array out-of-bounds access vulnerability in the Linux kernel's ath11k Wi-Fi driver, specifically affecting the ath11k_soc_dp_stats::hal_reo_error array. The vulnerability stems from incorrect indexing in the ath11k_dp_process_rx() function, which uses the REO destination SRNG ring ID instead of the normal ring ID. Since SRNG ring IDs differ from normal ring IDs, this leads to out-of-b [truncated]
A use-after-free vulnerability exists in the Linux kernel's pxafb framebuffer driver, affecting Siemens industrial networking products. The flaw occurs in the pxafb_probe function where &fbi->task is associated with pxafb_task. The pxafb_blank function within the &pxafb_ops struct can schedule work that may execute after the framebuffer structure has been freed during module removal, leading to a use-afte [truncated]
CVE-2024-49913 is a null pointer dereference vulnerability in the AMD display driver subsystem (drm/amd/display), specifically in the `commit_planes_for_stream` function where a missing null check for `top_pipe_to_program` could lead to system instability. The vulnerability was published on August 12, 2025, and last modified on February 25, 2026. Siemens ProductCERT issued advisory SSA-355557 addressing t [truncated]
CVE-2024-49907 describes a missing null pointer check in the Linux kernel's AMD display driver (drm/amd/display) before using dc->clk_mgr. The vulnerability was originally published on 2025-08-12 and last modified on 2026-02-25. CISA's ICS advisory ICSA-25-226-07, which was republished on 2026-02-25 based on Siemens ProductCERT advisory SSA-355557, marks this CVE as **Misinformed** for the listed Siemens [truncated]
CVE-2024-49902 describes a vulnerability in the jfs filesystem component related to the Qualcomm MSM GPU driver. The issue involves assigning msm_gpu->pdev earlier in the initialization process to prevent null pointer dereferences in msm_gpu_cleanup. The vulnerability was published on August 12, 2025, and last modified on February 25, 2026. Siemens has identified this CVE as affecting their RUGGEDCOM RST2 [truncated]
CVE-2024-49901 describes a vulnerability in the drm/msm/adreno kernel driver where improper initialization ordering could lead to null pointer dereferences during cleanup operations. The issue stems from msm_gpu->pdev being assigned too late in the initialization process, potentially causing crashes in msm_gpu_cleanup when the platform device pointer is accessed before proper assignment. This vulnerabilit [truncated]
This CVE addresses an uninitialized memory vulnerability in the Linux kernel's Journaled File System (JFS) implementation. The issue stems from improper initialization of the `new_ea` field within the `ea_buffer` structure used during extended attribute operations. When `ea_get()` allocates the `ea_buf` structure, the `new_ea` member was not zeroed, leading to use of uninitialized values that could propag [truncated]
CVE-2024-49896 is a null pointer dereference vulnerability in the AMD display driver subsystem (drm/amd/display). The flaw exists in the dc_is_stream_unchanged function, where a stream pointer could be dereferenced without proper null validation. The vulnerability was addressed by adding a null check for the stream before dereferencing it. This issue affects Siemens industrial networking products that inc [truncated]
CVE-2024-49894 is a buffer overflow vulnerability in the Linux kernel's AMD display driver subsystem, specifically within the `cm_helper_translate_curve_to_degamma_hw_format` function in `drivers/gpu/drm/amd/display/dc/dcn10/dcn10_cm_common.c`. The vulnerability occurs when an index variable 'i' exceeds the bounds of the `TRANSFER_FUNC_POINTS` array, leading to out-of-bounds access on the `output_tf->tf_p [truncated]
CVE-2024-49889 is a use-after-free vulnerability in the Linux kernel's ext4 filesystem, specifically within the ext4_ext_show_leaf() function. The flaw occurs when ext4_find_extent() frees or reallocates a path structure, but a previously saved pointer to that path is still used, leading to potential memory corruption. This vulnerability is only exploitable when EXT_DEBUG is defined, meaning it does not a [truncated]
A slab-use-after-free vulnerability in the Linux kernel's ext4 filesystem, specifically within the ext4_split_extent_at() function, affects Siemens industrial networking products running SINEC OS. The vulnerability was resolved in the upstream Linux kernel and has been addressed in Siemens product updates.
CVE-2024-49883 is a use-after-free vulnerability in the Linux ext4 filesystem, specifically within the ext4_ext_insert_extent() function. The flaw occurs when ext4_ext_create_new_leaf() reallocates a path structure, but the stale path pointer continues to be used, leading to memory corruption. This vulnerability has been identified as affecting Siemens industrial networking products that incorporate vulne [truncated]
CVE-2024-49882 is a medium-severity vulnerability (CVSS 5.5) in the Linux ext4 filesystem, specifically within the ext4_ext_try_to_merge_up() function. The issue involves a double-free condition where path[1].p_bh is not set to NULL after being released, potentially allowing the same buffer header to be freed twice. This vulnerability was published on 2025-08-12 and last modified on 2026-02-25. Siemens ha [truncated]
A vulnerability in the Linux kernel's ext4 filesystem implementation, specifically within the ext4_find_extent() function, has been identified and resolved. The issue involves improper handling of the orig_path variable, which could lead to system instability or denial of service conditions. This vulnerability affects Siemens industrial networking products that incorporate the vulnerable Linux kernel comp [truncated]
A NULL pointer dereference vulnerability exists in the omapdrm (OMAP Direct Rendering Manager) kernel driver. The alloc_ordered_workqueue function may return NULL on failure, but subsequent code may dereference this pointer without validation, leading to a kernel crash. This vulnerability affects the Linux kernel's DRM subsystem for TI OMAP SoCs. Siemens has identified this CVE as affecting certain indust [truncated]
A vulnerability in the Linux kernel's CXL (Compute Express Link) memory driver affects Siemens industrial networking products running SINEC OS. The flaw stems from improper resource hierarchy handling in drivers/dax/kmem.c, where add_memory_driver_managed() creates a nested resource structure during CXL memory onlining. This causes region_intersects() to fail when locating System RAM resources, as it expe [truncated]
CVE-2024-49877 is a NULL pointer dereference vulnerability in the Linux kernel's OCFS2 (Oracle Cluster File System 2) filesystem. The flaw occurs during cleanup operations when the OCFS2_BH_READAHEAD flag is not set, potentially causing a NULL pointer dereference in ocfs2_set_buffer_uptodate() when the buffer head (bh) is NULL. This vulnerability was originally published on August 12, 2025, and was subseq [truncated]
A NULL pointer dereference vulnerability in the btrfs filesystem, triggered when a new transaction fails to start. The vulnerability was initially reported as affecting Siemens industrial networking products running SINEC OS, but subsequent analysis determined these products were not actually vulnerable. CISA and Siemens updated the advisory on 2026-02-25 to clarify affected configurations and remove reje [truncated]
This CVE describes a race condition in the Linux Btrfs filesystem where fixup workers may not complete before the cleaner kthread is stopped during filesystem unmount (close_ctree()). The issue was originally published on 2025-08-12 and last modified on 2026-02-25. Siemens ProductCERT issued advisory SSA-355557 covering this vulnerability in third-party components used within SINEC OS, affecting industria [truncated]
A null pointer dereference vulnerability exists in the Linux kernel's vhost/scsi subsystem within the vhost_scsi_get_req() function. This flaw, published on 2025-08-12 and last modified on 2026-02-25, affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST2428P and SCALANCE X-family switches. The vulnerability stems from improper input validation (CWE-20) in the vir [truncated]
CVE-2024-49860 is a medium-severity vulnerability (CVSS 5.5) affecting Siemens industrial networking products running SINEC OS. The vulnerability exists in the Common Platform Interface (CPI) sysfs implementation, where the _STR method fails to validate return types. When non-buffer objects are returned, the description_show() function accesses invalid memory, leading to a local denial-of-service conditio [truncated]
A vulnerability in the Linux kernel's EFI stub TPM event log handling could allow local attackers to cause kernel crashes on affected Siemens industrial networking devices. The issue stems from improper memory reservation for the TPM event log table during kexec operations, potentially leading to memory corruption and denial of service.
A Trusted Platform Module (TPM) resource leak vulnerability exists in the Linux kernel's TPM driver. When tpm_dev_transmit prepares TPM space for command transmission and the command subsequently fails, no rollback of this preparation is performed. This can result in transient handles being leaked if the device is closed without further commands being executed. The vulnerability is classified as MEDIUM se [truncated]
A vulnerability in the Linux kernel bcache subsystem affects Siemens industrial networking products. The issue stems from an improper change replacing IS_ERR_OR_NULL with IS_ERR, which can lead to NULL pointer dereference conditions. This local vulnerability requires low privileges to exploit and results in high availability impact. Siemens has released firmware updates to address this issue in affected R [truncated]
CVE-2024-47757 describes a potential out-of-bounds (OOB) read vulnerability in the nilfs2 filesystem's nilfs_btree_check_delete() function. The issue occurs when retrieving the maximum key if the root node has no entries, causing memory access outside the block buffer. This vulnerability was originally published in the Linux kernel context but appears in Siemens industrial products through third-party com [truncated]
A logic error in the Keystone PCI controller driver (ks_pcie_quirk()) uses a logical AND (&&) where OR (||) was intended, potentially causing NULL pointer dereference and local denial-of-service. The vulnerability affects Siemens industrial networking products running SINEC OS with vulnerable Linux kernel versions. CISA published this advisory on 2025-08-12; Siemens subsequently updated affected product l [truncated]
A NULL pointer dereference vulnerability exists in the RDMA/cxgb4 driver where the `lookup_atid()` function can return NULL if the ATID is invalid or does not exist in the identifier table. The `act_establish()` and `act_open_rpl()` functions fail to check for this NULL return, leading to potential null pointer dereference. This vulnerability affects Siemens industrial networking products running SINEC OS [truncated]
A vulnerability in the Linux kernel's vhost_vdpa subsystem affects Siemens industrial networking products running SINEC OS. The flaw involves incorrect assignment of IRQ bypass producer tokens, which could lead to memory safety issues. The vulnerability requires local access with high privileges to exploit. Siemens has released updates to address this issue in affected RUGGEDCOM and SCALANCE product families.
A use-after-free vulnerability exists in the Linux kernel's ether3 network driver due to a race condition between timer initialization and device removal. The vulnerability occurs in the ether3_probe function where a timer is initialized with a callback bound to device memory; if the module or device is removed before the timer expires, the ether3_remove cleanup function may free memory that the timer cal [truncated]