These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2024-40945 is a Linux kernel IOMMU vulnerability where iommu_sva_bind_device() could return NULL instead of an ERR_PTR error value, potentially causing kernel NULL pointer dereference in drivers that only check IS_ERR(). The issue is limited to kernels without CONFIG_IOMMU_SVA configured. Siemens has assessed this as 'Misinformed' impact for affected industrial networking products, indicating the vuln [truncated]
CVE-2024-40943 describes a race condition in the OCFS2 (Oracle Cluster File System 2) Linux kernel module between hole punching operations and asynchronous I/O (AIO) combined with direct I/O (DIO). The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. The source advisory (ICSA-25-226-07) from CISA's CSAF repository indicates this CVE was included in a Siemens ProductCERT advisory [truncated]
CVE-2024-40942 is a memory leak vulnerability in the Linux kernel's mac80211 wireless subsystem, specifically affecting mesh networking functionality. The flaw occurs in the Hybrid Wireless Mesh Protocol (HWMP) code where mesh_preq_queue objects are added to a list in ieee80211_if_mesh to track mesh paths (mpath) requiring resolution. When an mpath is deleted—for example, when a mesh interface is removed— [truncated]
CVE-2024-40941 is an out-of-bounds read vulnerability in the Intel Wireless (iwlwifi) driver for Linux, specifically in the mvm (Multi-Virtual-Machine) component. The flaw occurs when the firmware sends a notification claiming more data than is actually present, causing the driver to read past the allocated buffer for the mfuart notification. While this vulnerability originates in the Linux kernel's WiFi [truncated]
This CVE addresses a memory leak in the Linux kernel's HID Logitech DJ driver, specifically in the `logi_dj_recv_switch_to_dj_mode()` function. The vulnerability occurs on the error path of `logi_dj_recv_send_report()` where allocated memory is not properly freed, leading to resource exhaustion over time. Siemens has identified this as affecting certain industrial networking products that incorporate the [truncated]
A memory leak vulnerability exists in the drm/exynos/vidi driver's .get_modes() function. This issue affects the Linux kernel's Direct Rendering Manager (DRM) subsystem for Samsung Exynos SoCs. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. According to the source advisory, Siemens has assessed the impact as 'Misinformed' for affected product configurations, indicating this [truncated]
CVE-2024-40931 is a MEDIUM severity vulnerability (CVSS 5.5) in the Linux kernel's Multipath TCP (MPTCP) implementation. The issue involves improper initialization of the snd_una (send unacknowledged) sequence number during connection establishment, which could lead to incorrect TCP state handling. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. Siemens has identified this C [truncated]
CVE-2024-40929 is an out-of-bounds access vulnerability in the Intel Wireless WiFi (iwlwifi) driver for Linux, specifically in the mac80211 virtual monitor (mvm) component. The flaw occurs when the driver accesses the ssids pointer without first validating that n_ssids is non-zero. In certain versions of cfg80211, the ssids pointer may be valid even when n_ssids is 0, leading to an out-of-bounds memory ac [truncated]
This CVE affects the drm/exynos HDMI driver in the Linux kernel. When EDID reading fails and the driver reports no available modes, the DRM core adds an artificial 1024x786 mode to the connector. The fix ensures a safe 640x480 mode is reported as a fallback instead. Siemens has identified this vulnerability as affecting certain industrial networking products running SINEC OS, including the RUGGEDCOM RST24 [truncated]
A deadlock vulnerability exists in the Linux kernel's mac80211 wireless subsystem within the ieee80211_sta_ps_deliver_wakeup() function. This flaw can cause system hangs when handling station power-save wakeup events, potentially leading to denial of service conditions in affected wireless networking implementations. The vulnerability was originally published in the Linux kernel and subsequently identifie [truncated]
CVE-2024-40905 describes a possible race condition in the Linux kernel IPv6 networking subsystem, specifically within the `__fib6_drop_pcpu_from()` function. This vulnerability was published on August 12, 2025, and last modified on February 25, 2026. The issue affects Siemens industrial networking products running SINEC OS, including the RUGGEDCOM RST2428P and SCALANCE X-family switches. According to CISA [truncated]
A vulnerability in the Linux kernel's USB CDC-WDM (Wireless Device Management) class driver can cause CPU lockup due to excessive log message generation. The issue stems from uncontrolled logging that can exhaust system resources, leading to denial of service conditions. This vulnerability affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST2428P and SCALANCE X-f [truncated]
A buffer overflow vulnerability exists in the Journaled File System (JFS) extended attribute (xattr) handling code. When an xattr size exceeds the expected value, the kernel logs the xattr content in hexadecimal format for debugging purposes. This logging operation can read beyond the allocated buffer boundary, resulting in an out-of-bounds access. The vulnerability is classified as CWE-120 (Buffer Copy w [truncated]
CVE-2024-40901 is a Linux kernel vulnerability in the mpt3sas SCSI driver that was resolved by avoiding test/set_bit() operations on non-allocated memory. The vulnerability involves improper memory access in the SCSI mpt3sas driver where bit manipulation functions could operate on memory that had not been properly allocated, potentially leading to undefined behavior or system instability. The issue was ad [truncated]
CVE-2024-39509 is a Linux kernel HID (Human Interface Device) subsystem issue where an unnecessary WARN_ON() macro in the implement() function could trigger excessive kernel warnings. The vulnerability exists in the HID core when attempting to write a value into a field of smaller size in an output report. While the implement() function already handles this case by trimming the value with a bitmask and lo [truncated]
CVE-2024-39506 is a NULL pointer dereference vulnerability in the Linux kernel's liquidio driver, specifically in the `lio_vf_rep_copy_packet()` function. The flaw occurs when `pg_info->page` is compared to NULL but then unconditionally passed to `skb_add_rx_frag()`, potentially causing a null pointer dereference. This vulnerability was published on August 12, 2025, and last modified on February 25, 2026. [truncated]
CVE-2024-39505 is a vulnerability in the Linux kernel's Direct Rendering Manager (DRM) Komeda driver. The issue involves a missing null and error pointer check in `komeda_pipeline_get_state()`, which may return an error-valued pointer that could be dereferenced without validation. This vulnerability was published on August 12, 2025, and last modified on February 25, 2026. The vulnerability is present in S [truncated]
A use-after-free vulnerability exists in the Linux kernel's netfilter ipset subsystem, specifically within the list:set type. The race condition occurs between namespace cleanup operations and garbage collection (gc) during RCU cleanup. When namespace cleanup destroys list:set type sets while garbage collection is waiting to run, the gc process subsequently accesses data from the already-destroyed set, re [truncated]
CVE-2024-39502 is a use-after-free vulnerability in the Linux kernel's ionic network driver, specifically affecting the NAPI (New API) polling mechanism. The flaw occurs when `ionic_qcq_enable()` incorrectly enables NAPI for queues that were previously unregistered via `netif_napi_del()`, because the `.poll` pointer is not reset to NULL upon deletion. This can lead to calling `napi_enable()` on an unregis [truncated]
CVE-2024-39499 is a medium-severity information disclosure vulnerability in the VMware Virtual Machine Communication Interface (VMCI) driver. The flaw exists in the `event_deliver()` function where `event_msg->event_data.event` is used as an array index without proper sanitization. This user-controlled value can trigger speculative execution side-channels, potentially leaking kernel memory contents to use [truncated]
A use-after-free vulnerability exists in the Linux kernel greybus subsystem, specifically in the gb_interface_release function, due to a race condition. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. Siemens ProductCERT issued advisory SSA-355557 addressing third-party components in SINEC OS, which CISA subsequently republished as ICSA-25-226-07. The advisory was revised mu [truncated]
This CVE addresses a memory leak and potential use-after-free (UAF) vulnerability in the Linux kernel's Intel QuickAssist Technology (QAT) crypto driver. The flaw exists in the ADF_DEV_RESET_SYNC mechanism, where using completion_done to check if a caller has finished only works correctly after a complete call has been made. Additionally, a race condition exists where the caller may not yet have invoked w [truncated]
A memory leak vulnerability exists in the Linux kernel's IPv6 Segment Routing (SR) subsystem, specifically within the `seg6_hmac_init_algo` function. When initialization of HMAC algorithms fails partway through, the function returns without properly cleaning up previously allocated memory and cryptographic transform (tfm) structures. This leads to resource exhaustion over time, potentially causing denial [truncated]
CVE-2024-39487 is a medium-severity out-of-bounds read vulnerability in the Linux kernel's bonding driver, specifically within the `bond_option_arp_ip_targets_set()` function. The vulnerability was resolved in the Linux kernel, indicating a patch is available upstream. Siemens has assessed this CVE as affecting certain industrial networking products, including the RUGGEDCOM RST2428P and SCALANCE families, [truncated]
A resource leak vulnerability exists in the Linux kernel's Davinci MMC driver. When the driver is built-in (CONFIG_MMC_DAVINCI=y) rather than as a module, the remove function is marked with __exit and discarded at link time. If the device is unbound via sysfs or hotplug events, the driver is removed without executing cleanup code, leading to resource leaks. Siemens has assessed this vulnerability as 'Misi [truncated]
CVE-2024-39482 describes a variable length array abuse vulnerability in the Linux kernel bcache subsystem, specifically within the btree_iter component. The vulnerability was published on 2025-08-12 and last modified on 2026-02-25. Siemens ProductCERT issued advisory SSA-355557 addressing this CVE as part of third-party component security in SINEC OS. CISA subsequently republished this advisory as ICSA-25 [truncated]
A buffer overflow vulnerability exists in the Linux kernel's kdb (kernel debugger) component, specifically during tab-completion of symbols. The flaw stems from incorrect use of strncpy() where the size of the source buffer is passed instead of the destination buffer. This can result in writing past the end of the command buffer when the cursor is positioned in the middle of a full buffer. The vulnerabili [truncated]
A deadlock vulnerability in the Linux kernel's md/raid5 subsystem could cause the raid5d() kernel thread to wait indefinitely for itself to clear the MD_SB_CHANGE_PENDING flag, resulting in a system hang. The vulnerability exists in the RAID5 driver where improper synchronization logic allows the raid5d() thread to block on a condition that only it can satisfy, creating a circular wait condition. Siemens [truncated]
CVE-2024-39475 is a divide-by-zero vulnerability in the Linux kernel's S3 Savage framebuffer driver (savagefb). The issue stems from incomplete error handling: while commit 04e5eac8f3ab added a check to prevent pixclock=0 from causing division by zero in savagefb_check_var(), the savagefb_probe() function failed to propagate this error condition. When a zero pixclock value is supplied, the unchecked error [truncated]
CVE-2024-39469 is a vulnerability in the Linux kernel's nilfs2 filesystem affecting Siemens industrial networking products. The flaw exists in the nilfs_empty_dir() function, which handles directory emptiness checks. When a directory folio/page read fails due to I/O errors, the function incorrectly continues looping instead of returning immediately. This can lead to two adverse outcomes: false determinati [truncated]