These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2024-42094 describes a potential stack overflow condition in the Linux kernel's net/iucv subsystem. The vulnerability stems from explicit allocation of cpumask variables on the stack when the kernel is compiled with CONFIG_CPUMASK_OFFSTACK=y. This configuration-dependent weakness could allow local attackers to trigger stack overflow conditions, potentially leading to denial of service or other undefin [truncated]
CVE-2024-42093 is a HIGH severity vulnerability (CVSS 7.1) affecting the Linux kernel's DPAA2 (Data Path Acceleration Architecture Gen 2) network driver. The issue stems from explicit allocation of cpumask variables on the stack when CONFIG_CPUMASK_OFFSTACK=y is enabled, which can lead to potential stack overflow conditions. This vulnerability was published on August 12, 2025, and last modified on Februar [truncated]
A vulnerability in the Linux kernel's GPIO Davinci driver could allow out-of-bounds array access during device probe. The flaw exists in davinci_gpio_probe() where improper bounds checking on the chips->irqs array may lead to memory corruption. This affects Siemens industrial networking products running SINEC OS that incorporate the vulnerable kernel component. The vulnerability has a CVSS score of 5.5 (M [truncated]
A NULL pointer dereference vulnerability exists in the Linux kernel's ASoC fsl-asoc-card driver. The issue stems from improper initialization order where `priv->pdev` is dereferenced in `fsl_asoc_card_audmux_init()` before being assigned. Since `priv` is zero-initialized, this results in a NULL pointer dereference when the code attempts to access the `dev` structure for error reporting via `dev_err` macro [truncated]
CISA republished a Siemens ProductCERT advisory on 2026-02-25 regarding CVE-2024-42087, a Linux kernel display driver issue affecting the ilitek-ili9881c panel driver. The underlying vulnerability involves a warning condition with GPIO controllers. Siemens has assessed the impact as misinformed for affected SINEC OS-based products, indicating the vulnerability does not pose a practical security risk in th [truncated]
CVE-2024-42086 describes integer overflow vulnerabilities in the BME680 sensor driver's compensate() functions within the Linux Industrial I/O (IIO) chemical subsystem. The BME680 is a digital environmental sensor measuring temperature, humidity, pressure, and indoor air quality. The compensate() functions perform calibration calculations on raw sensor readings; insufficient bounds checking on these calcu [truncated]
CVE-2024-42084 describes a vulnerability in the Linux kernel's ftruncate system call where passing a negative length parameter accidentally succeeds in truncating files to a size between 2GiB and 4GiB, rather than returning an error as expected. This behavior could allow unintended file truncation operations that may lead to data integrity issues or denial of service conditions in affected systems. The vu [truncated]
This CVE describes an unused WARN() macro in the Linux kernel's XDP (eXpress Data Path) memory registration function __xdp_reg_mem_model(). The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. Siemens ProductCERT issued advisory SSA-355557 covering this issue, which CISA subsequently republished as ICSA-25-226-07. The advisory was updated multiple times, with the most recent revi [truncated]
CVE-2024-42077 describes a vulnerability in the ocfs2 filesystem where Direct I/O (DIO) operations fail due to insufficient transaction credits. The vulnerability was originally published on 2025-08-12 and last modified on 2026-02-25. According to the source advisory, this CVE was included in a CISA ICS advisory (ICSA-25-226-07) covering Siemens Third-Party Components in SINEC OS. However, the threat asse [truncated]
CVE-2024-42076 is a vulnerability in the Linux kernel's Controller Area Network (CAN) J1939 protocol implementation, specifically within the j1939_send_one() function. The issue involves unused data in this function, which could lead to information disclosure or undefined behavior. The vulnerability has been assigned a CVSS score of 5.5 (MEDIUM severity). Siemens has identified this CVE as affecting certa [truncated]
CVE-2024-42070 is a vulnerability in the Linux kernel's netfilter nf_tables subsystem affecting Siemens industrial networking products. The flaw involves incomplete validation of NFT_DATA_VALUE during register store operations, which could allow pointer leakage to chain objects through data registers. The vulnerability stems from conditional validation logic that fails to consistently verify register type [truncated]
CVE-2024-41097 is a vulnerability in the Linux kernel's USB ATM driver for Conexant AccessRunner USB ADSL modems (cxacru). The flaw involves incomplete endpoint checking in the cxacru_bind() function, which could lead to improper handling of USB device endpoints. This vulnerability was published on August 12, 2025, and last modified on February 25, 2026. The vulnerability has been assessed as MEDIUM sever [truncated]
CVE-2024-41092 describes a potential use-after-free (UAF) vulnerability in the Linux kernel's drm/i915/gt driver related to fence register revocation. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. Siemens has identified this CVE as affecting their RUGGEDCOM RST2428P (6GK6242-6PA00) product, though the CISA advisory marks the impact assessment as 'Misinformed' for the affec [truncated]
CVE-2024-41091 is a HIGH severity vulnerability (CVSS 7.1) in the Linux kernel's TUN/TAP driver, specifically within the `tun_xdp_one()` path. The flaw involves missing validation of frame length, which can result in corrupted socket buffers (skb) being passed down the network stack. When `eth_type_trans()` processes these malformed frames, it may access Ethernet header data that is shorter than the minim [truncated]
CVE-2024-41090 is a HIGH severity vulnerability (CVSS 7.1) in the Linux kernel's tap driver, specifically in the `tap_get_user_xdp()` path. The flaw involves missing validation of frame length, which can result in corrupted socket buffers (skb) being passed down the network stack. This may lead to out-of-bounds memory access or inconsistent header metadata that confuses lower network layers. The vulnerabi [truncated]
CVE-2024-41089 describes a null pointer dereference vulnerability in the Linux kernel's Nouveau DRM driver, specifically within the nv17_tv_get_hd_modes function in dispnv04. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. According to the source advisory, this CVE is categorized as 'Misinformed' in the threat assessment, indicating it may not represent a genuine security vu [truncated]
CVE-2024-41087 is a double-free vulnerability in the Linux kernel's libata-core ATA subsystem. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. CISA republished this advisory on 2026-02-25 based on Siemens ProductCERT SSA-355557 advisory updates. The vulnerability carries a HIGH severity CVSS score of 7.8. Siemens has assessed the impact as 'Misinformed' for affected product [truncated]
CVE-2024-41081 is a Linux kernel vulnerability in the Identifier Locator Addressing (ILA) subsystem, specifically in the `ila_output()` function. The fix involves blocking bottom halves (BH) to prevent potential race conditions. The vulnerability was published on August 12, 2025, and last modified on February 25, 2026. Siemens ProductCERT issued advisory SSA-355557 addressing third-party Linux kernel comp [truncated]
CVE-2024-41077 is a HIGH severity vulnerability (CVSS 7.1) affecting the null_blk Linux kernel driver, which is used in Siemens industrial networking products including the RUGGEDCOM RST2428P and SCALANCE X-family switches running SINEC OS. The vulnerability involves a validation error on block size that could lead to security impacts in affected systems. The issue was initially published on August 12, 20 [truncated]
CVE-2024-41072 is a vulnerability in the Linux kernel's wireless configuration subsystem (cfg80211) that was resolved by adding an input validation check. The issue existed in the `cfg80211_wext_siwscan()` function, which handles wireless scanning requests via the `SIOCSIWSCAN` ioctl. Without proper bounds checking, a user could pass a number of channels exceeding `IW_MAX_FREQUENCIES`, potentially leading [truncated]
CVE-2024-41070 describes a use-after-free (UAF) vulnerability in the KVM (Kernel-based Virtual Machine) subsystem for PowerPC (PPC) architecture, specifically within the Book3S HV (Hypervisor) mode in the function kvm_spapr_tce_attach_iommu_group(). This vulnerability exists in the Linux kernel's handling of IOMMU group attachments for SPAPR (Scalable Power Architecture Platform Reference) TCE (Translatio [truncated]
CVE-2024-41068 describes a failure condition in the sclp_init() function within the s390/sclp subsystem of the Linux kernel. The System Control and Program (SCLP) interface is used on IBM System z (s390) mainframes for communication between the operating system and the service processor. A failure in sclp_init() could prevent proper initialization of this critical interface, potentially affecting system a [truncated]
CVE-2024-41065 is a vulnerability in the Linux kernel's powerpc/pseries subsystem where reading the dispatch trace log from /sys/kernel/debug/powerpc/dtl/cpu-* triggers a BUG() condition, causing a kernel crash. The vulnerability stems from improper input validation when handling debug filesystem access to CPU dispatch trace logs on IBM Power Systems (pseries) platforms. While the CVE description indicate [truncated]
CVE-2024-41064 describes a possible crash condition in the Linux kernel's powerpc/eeh (Error Event Handler) subsystem when the edev->pdev pointer changes. The vulnerability was originally published on 2025-08-12 and last modified on 2026-02-25. CISA's advisory ICSA-25-226-07, which tracks this CVE, underwent multiple revisions: an initial publication, corrections to affected products (moving entries to Kn [truncated]
CVE-2024-41063 describes a deadlock condition in the Linux kernel's Bluetooth subsystem, specifically within hci_core at the destroy_workqueue() function. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. CISA's advisory ICSA-25-226-07, which was republished on 2026-02-25 based on Siemens ProductCERT advisory SSA-355557, indicates that this CVE was marked as 'Misinformed' for [truncated]
CVE-2024-41059 describes an uninitialized value vulnerability in the Linux kernel's hfsplus filesystem driver, specifically in the copy_name function. The vulnerability was published on August 12, 2025, and last modified on February 25, 2026. Siemens ProductCERT issued advisory SSA-355557 addressing this vulnerability as it affects SINEC OS and related industrial networking products. CISA republished this [truncated]
CVE-2024-41055 is publicly documented in Siemens/CISA advisory material as a Linux kernel NULL pointer dereference condition tied to pfn_section_valid(). The supplied advisory states that a prior READ_ONCE() change did not prevent dereferencing a cleared ms->usage pointer, and that no fix was available at publication time.
CVE-2024-41049 is a Linux kernel use-after-free in filelock/posix_lock_inode. In Siemens advisory ICSA-25-072-03 for SIMATIC S7-1500 TM MFP - BIOS, the issue is described as a race in which a lock entry can be freed before the tracepoint fires; the documented fix is to move the tracepoint inside the spinlock. At publication, Siemens listed no fix and only a trusted-source workaround.
CISA’s advisory for Siemens SIMATIC S7-1500 TM MFP - BIOS maps CVE-2024-41046 to a Linux kernel double-free in the lantiq_etop detach path. The source says the descriptor count is not incremented, so the same skb can be released multiple times, which is consistent with a serious availability risk. At publication time, Siemens listed no fix and only a limited workaround.
CVE-2024-41044 is a medium-severity vulnerability (CVSS 5.5) in the Point-to-Point Protocol (PPP) implementation, specifically involving malformed packets that are incorrectly claimed as Link Control Protocol (LCP) packets. The vulnerability was published on August 12, 2025, and last modified on February 25, 2026. According to CISA's ICS advisory ICSA-25-226-07, this vulnerability affects Siemens industri [truncated]