These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2024-46722 describes an out-of-bounds read vulnerability in the Linux kernel's drm/amdgpu driver, specifically when accessing mc_data[i-1]. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. Siemens ProductCERT issued advisory SSA-355557 covering this CVE, which CISA subsequently republished as ICSA-25-226-07. The advisory affects Siemens industrial networking products runn [truncated]
A NULL pointer dereference vulnerability exists in the Linux kernel's AppArmor security module, specifically within profile replacement operations. The flaw occurs when `profile->parent->dents[AAFS_PROF_DIR]` is NULL, which can happen when a parent profile is created via `__create_missing_ancestors()` and `ent->old` is NULL in `aa_replace_profiles()`. In this scenario, the code fails to properly return an [truncated]
A null pointer dereference vulnerability exists in the Linux kernel's USB Type-C UCSI (USB Type-C Connector System Software Interface) driver. The flaw occurs in the `ucsi_register_altmode` function, which checks for error pointers using `IS_ERR` but incorrectly treats NULL as a valid return value. When `CONFIG_TYPEC_DP_ALTMODE` is not enabled, `ucsi_register_displayport` returns NULL, leading to a NULL p [truncated]
CVE-2024-46714 is a null pointer dereference vulnerability in the AMD display driver subsystem (drm/amd/display). The issue exists in the wbscl_set_scaler_filter function, where callers can pass a null filter parameter (potentially returned from wbscl_get_filter_coeffs_16p) without proper validation. A null check has been added to prevent this condition. The vulnerability was published on 2025-08-12 and l [truncated]
CVE-2024-46713 is a medium-severity vulnerability (CVSS 5.5) affecting the Linux kernel's perf subsystem, specifically in AUX buffer serialization. The vulnerability was published on August 12, 2025, and most recently modified on February 25, 2026. Siemens has identified this CVE as affecting multiple industrial networking products running SINEC OS, including the RUGGEDCOM RST2428P and SCALANCE XC-300/XR- [truncated]
CVE-2024-46707 describes a KVM arm64 virtualization issue where writes to ICC_*SGI*_EL1 registers are trapped to EL2 when a guest lacks vGICv3 configuration and the host cannot emulate GICv2. The CISA CSAF advisory ICSA-25-226-07, republished on 2026-02-25, explicitly marks this CVE as **Misinformed** for Siemens products, indicating the vulnerability does not actually affect the listed Siemens industrial [truncated]
CVE-2024-46702 describes a Linux kernel issue in the Thunderbolt subsystem where XDomain connections are not properly marked as unplugged when a router is removed. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. CISA republished this advisory on 2026-02-25 based on Siemens ProductCERT SSA-355557. The source advisory (ICSA-25-226-07) underwent multiple revisions, including co [truncated]
CVE-2024-46689 is a medium-severity vulnerability (CVSS 5.5) affecting Qualcomm System-on-Chip (SoC) command database (cmd-db) shared memory handling in the Linux kernel. The issue stems from incorrect memory mapping attributes: the cmd-db region is mapped as Write-Back (WB) cacheable when it should be Write-Combining (WC). Since Linux does not actually write to this region—it is write-protected by XPU (e [truncated]
A NULL pointer dereference vulnerability exists in the Linux kernel's pinctrl subsystem, specifically within the pcs_get_function() function in the pinctrl-single driver. The function pinmux_generic_get_function() can return NULL, but the resulting pointer was dereferenced without validation, leading to a potential kernel crash. This vulnerability affects Siemens industrial networking products running SIN [truncated]
A vulnerability in the Linux kernel's ethtool subsystem could allow a local attacker to cause a denial-of-service condition. The flaw occurs when retrieving link settings without verifying that the network device is present, potentially leading to a NULL pointer dereference or use-after-free condition. Siemens has identified this vulnerability as affecting multiple industrial networking products running S [truncated]
A NULL pointer dereference vulnerability exists in the Linux kernel's GTP (GPRS Tunneling Protocol) implementation. When sockfd_lookup() fails, gtp_encap_enable_socket() returns a NULL pointer, but its callers only check for error pointers, missing the NULL pointer case. This flaw can lead to a denial of service condition through local exploitation. The vulnerability affects Siemens industrial networking [truncated]
A vulnerability in the USB DWC3 core driver could allow invalid event buffer address access during runtime suspend, potentially causing SMMU faults and memory issues on Exynos platforms. This affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST2428P and SCALANCE X-300/X-400/X-500 families. The vulnerability requires local access with low privileges and no user in [truncated]
A use-after-free vulnerability exists in the Linux kernel USB DWC3 ST driver probe error handling path. The flaw stems from an incorrect error cleanup label that decrements the reference count of a platform device that was never allocated by the probe function itself. When triggered, this leads to unbalanced reference counts, premature resource release, and potential use-after-free conditions during subse [truncated]
CVE-2024-46673 is a double-free vulnerability in the Linux kernel's aacraid SCSI driver that was published on August 12, 2025, and last modified on February 25, 2026. The flaw occurs in the aac_probe_one() function, which calls hardware-specific initialization functions through the aac_driver_ident::init pointer. These functions eventually invoke aac_init_adapter(). If aac_init_adapter() fails after alloc [truncated]
CVE-2024-4603 is an availability issue tied to slow DSA parameter/public key validation in OpenSSL. Siemens’ advisory maps the issue to 19 SCALANCE W700 wireless models and recommends upgrading affected devices to firmware V3.0.0 or later.
CVE-2024-45025 is a medium-severity vulnerability (CVSS 5.5) affecting Siemens industrial networking products running SINEC OS. The issue involves bitmap corruption in the close_range() system call when using the CLOSE_RANGE_UNSHARE flag with copy_fd_bitmaps, which can lead to denial of service conditions. The vulnerability was published on August 12, 2025, and subsequently modified on February 25, 2026, [truncated]
A vulnerability in the Linux kernel's memory cgroup event control mechanism (memcg_write_event_control) allows a local, authenticated user to trigger a kernel oops (denial of service). The flaw exists in how the kernel handles event control file descriptors for memory cgroups. Affected Siemens industrial networking products incorporate vulnerable Linux kernel versions in their SINEC OS firmware. Successfu [truncated]
A NULL pointer dereference vulnerability exists in the Linux kernel's xHCI (eXtensible Host Controller Interface) driver, specifically affecting Panther Point chipsets during full-speed USB device re-enumeration. This flaw can trigger a denial-of-service condition when a connected USB device undergoes re-enumeration at full speed. Siemens has identified this vulnerability as affecting multiple industrial [truncated]
CVE-2024-45003 is a medium-severity Linux kernel vulnerability affecting the virtual filesystem (VFS) layer, specifically impacting filesystems such as ext4 with the ea_inode feature enabled and UBIFS with extended attributes (xattr). The vulnerability stems from a potential deadlock condition that can occur when inode lookup operations are performed within the inode eviction callback function while opera [truncated]
CVE-2024-44999 is a HIGH severity vulnerability (CVSS 7.1) affecting the Linux kernel's GTP (GPRS Tunneling Protocol) implementation. The flaw exists in gtp_dev_xmit() where network headers are missing, potentially leading to information disclosure and denial of service conditions. The vulnerability requires local access with low privileges, no user interaction, and can result in high impact to confidenti [truncated]
CVE-2024-44998 describes a use-after-free vulnerability in the Linux kernel's ATM (Asynchronous Transfer Mode) driver, specifically in the idt77252 driver's dequeue_rx() function. The vulnerability was published on August 12, 2025, and last modified on February 25, 2026. Siemens has assessed this CVE as affecting certain industrial networking products that incorporate third-party Linux components, includi [truncated]
A deadlock vulnerability exists in the HNS3 (Hisilicon Network Subsystem 3) Ethernet driver within the Linux kernel. The issue occurs when configuring Traffic Control (TC) during a device reset operation, leading to a race condition that can cause system deadlock. This affects Siemens industrial networking products running SINEC OS that incorporate the vulnerable kernel component. The vulnerability is cla [truncated]
CVE-2024-44990 is a null pointer dereference vulnerability in the Linux kernel's bonding driver, specifically within the `bond_ipsec_offload_ok` function. The flaw occurs when the function dereferences a pointer without first verifying that an active slave exists in the bonding configuration. This vulnerability was resolved by adding a check for an active slave before pointer dereference. The issue affect [truncated]
A null pointer dereference vulnerability exists in the Linux kernel's bonding driver, specifically within the xfrm (IPsec transform) subsystem. The flaw occurs when the `real_dev` pointer is accessed without proper validation, leading to a potential system crash. This vulnerability affects Siemens industrial networking products that incorporate the vulnerable Linux kernel component, including RUGGEDCOM RS [truncated]
A use-after-free (UAF) vulnerability in the Linux kernel's IPv6 networking stack, specifically within the ip6_send_skb() function, affects Siemens industrial networking products. The vulnerability was resolved in the upstream Linux kernel and requires local access with low privileges to exploit, potentially leading to denial of service conditions.
CVE-2024-44971 is a memory leak vulnerability in the Linux kernel's Broadcom Starfighter 2 (bcm_sf2) Distributed Switch Architecture (DSA) driver. The flaw occurs when PHY devices are found and removed without properly decrementing their reference count, leading to resource exhaustion over time. Siemens has assessed this vulnerability as not affecting their RUGGEDCOM RST2428P product, as indicated by the [truncated]
CVE-2024-44965 is a Linux kernel vulnerability in the x86/mm subsystem affecting Page Table Isolation (PTI) cloning functionality. The flaw exists in pti_clone_pgtable(), which incorrectly assumes that start addresses are PMD (Page Middle Directory) aligned—a condition true on x86_64 but not on i386 architectures. This alignment assumption can cause the end condition to malfunction, resulting in a 'short' [truncated]
A null pointer dereference vulnerability exists in the Linux kernel USB gadget core. The flaw occurs when the endpoint descriptor is not properly set before accessing the maxpacket field, leading to a kernel panic. This can be triggered if a gadget driver fails to configure the endpoint for the current USB speed or if gadget descriptors are malformed such that the descriptor for the specific speed/endpoin [truncated]
CVE-2024-44954 describes a race condition vulnerability in the ALSA line6 driver involving racy access to the midibuf buffer. The vulnerability was addressed by implementing a spinlock to prevent concurrent access issues. This CVE was published on 2025-08-12 and last modified on 2026-02-25. The vulnerability is associated with Siemens industrial networking products, specifically the RUGGEDCOM RST2428P and [truncated]
CVE-2024-44944 is a Linux kernel vulnerability in the netfilter ctnetlink subsystem where the delete expectation path fails to use the nf_expect_get_id() helper function when calculating expectation IDs. This omission results in the leakage of the least significant bit (LSB) of the expectation object address to userspace, constituting an information disclosure weakness. The vulnerability has been resolved [truncated]