These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A buffer overflow vulnerability exists in the Linux kernel's speakup accessibility subsystem. When a console is configured with very large dimensions and contains words exceeding 256 characters, the system fails to properly bounds-check input before writing to a fixed-size word buffer, leading to a crash condition. This vulnerability was resolved in the Linux kernel by implementing proper length validatio [truncated]
A reference leak vulnerability in the Linux kernel's sysfs subsystem, specifically within the `sysfs_break_active_protection()` function, has been resolved. This flaw could allow a local attacker to cause a denial of service condition. The vulnerability affects Siemens industrial networking products running SINEC OS, including the RUGGEDCOM RST2428P and SCALANCE X-family switches. Siemens has released upd [truncated]
A memory overflow vulnerability in the Linux kernel's init/main.c static_command_line handling has been identified and resolved. The flaw could allow a local attacker with low privileges to cause a denial of service condition. Siemens has confirmed this vulnerability affects multiple industrial networking product families including RUGGEDCOM RST2428P and SCALANCE series devices running SINEC OS. The vulne [truncated]
CVE-2024-26926 is a Linux kernel vulnerability in the Android Binder driver, specifically within the `binder_get_object()` function. The issue stems from a regression introduced in commit `6d98eb95b450` (binder: avoid potential data leakage when copying txn), which unintentionally removed an offset alignment check when replacing `binder_alloc_copy_from_buffer()` calls with `copy_from_user()`. Without this [truncated]
CVE-2024-26924 is a use-after-free vulnerability in the Linux kernel's netfilter subsystem, specifically within the nft_set_pipapo module used for packet classification. The flaw occurs when handling large batches of elements with rapid add/remove patterns in nftables sets. When multiple elements share the same key—possible when an existing element has timed out or is inactive for the next generation—the [truncated]
A race condition vulnerability exists in the Linux kernel's AF_UNIX socket implementation, specifically between the garbage collector and the connect() system call. This flaw could allow a local attacker to trigger use-after-free conditions, potentially leading to privilege escalation, information disclosure, or system instability. The vulnerability affects Siemens industrial networking products running S [truncated]
This CVE addresses a performance regression in the Linux kernel's netfilter ipset subsystem, specifically affecting the swap operation. The vulnerability was resolved in the Linux kernel and affects Siemens industrial networking products running SINEC OS, including the RUGGEDCOM RST2428P and SCALANCE X-family switches. The issue is classified as a performance regression rather than a traditional security [truncated]
A memory leak vulnerability exists in the Linux kernel's Multiple Device (md) driver subsystem. When the kobject_add() function fails during bind_rdev_to_array(), the rdev->serial allocation is not freed, resulting in a kmemleak condition. The vulnerability was resolved in the Linux kernel with a fix for the memory leak of rdev->serial. Siemens has identified this vulnerability as affecting certain indust [truncated]
This CVE addresses a vulnerability in the Linux kernel's SCSI target subsystem. The issue involves improper handling of Task Management Functions (TMF) in the tmr_list, which could lead to race conditions or use-after-free scenarios in SCSI target mode implementations. The vulnerability was resolved by adding proper TMF to tmr_list handling in the SCSI target core code. Siemens has identified this as affe [truncated]
A memory leak vulnerability in the Linux kernel's cachefiles subsystem was resolved. The flaw existed in the cachefiles_add_cache() function, which could lead to memory exhaustion under certain conditions. This vulnerability affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST2428P and SCALANCE X-family switches. The issue was addressed through kernel patching. C [truncated]
A memory leak vulnerability in the Linux kernel's InfiniBand hfi1 driver, specifically in the `init_credit_return` function, has been identified and resolved. The vulnerability was published on August 12, 2025, and last modified on February 25, 2026. Siemens has assessed this CVE as 'Misinformed' for affected industrial control system products including the RUGGEDCOM RST2428P and SCALANCE X family devices [truncated]
A vulnerability in the Linux kernel's netfilter nf_tables subsystem could lead to improper state management when hook registration fails. The issue occurs because the dormant flag was not set upon hook registration failure, potentially causing resource management problems. This affects Siemens industrial networking products including RUGGEDCOM RST2428P and SCALANCE switch families running SINEC OS. The vu [truncated]
This CVE addresses a kernel information leak after free vulnerability in the Linux kernel's netlink subsystem, specifically within the skb_datagram_iter function. The vulnerability was resolved with a fix to prevent information disclosure from freed memory. Siemens has identified this CVE as affecting multiple industrial networking product families including RUGGEDCOM RST2428P and SCALANCE XC-300/XR-300/X [truncated]
A use-after-free vulnerability in the Linux kernel's Bluetooth subsystem, specifically in the hci_error_reset function, has been identified and resolved. The vulnerability was present in the Bluetooth Host Controller Interface (HCI) error handling path where a race condition could lead to accessing freed memory. Siemens has assessed this vulnerability as affecting certain industrial networking products ru [truncated]
This CVE addresses a use-after-free and null-pointer dereference vulnerability in the Linux kernel's GTP (GPRS Tunneling Protocol) driver, specifically within the gtp_newlink() function. The vulnerability was resolved in the Linux kernel, indicating a memory safety issue that could potentially lead to system instability or privilege escalation. The CISA CSAF advisory ICSA-25-226-15, published 2025-08-12 a [truncated]
A vulnerability in the Linux kernel's Btrfs filesystem device replacement functionality has been resolved. The issue involved improper validation of device names during the dev-replace operation, which could potentially lead to security issues. The vulnerability affects Siemens industrial networking products that utilize the affected Linux kernel components, specifically the RUGGEDCOM RST2428P and SCALANC [truncated]
A vulnerability in the Linux kernel's Freescale QDMA engine driver (fsl-qdma) was resolved by reordering initialization sequence: IRQ registration now occurs after register initialization. The flaw could lead to race conditions or undefined behavior if interrupts fired before hardware registers were properly configured. Siemens has assessed this CVE as 'Misinformed' for affected industrial networking prod [truncated]
A race condition vulnerability in the Linux kernel's mac80211 Wi-Fi subsystem affects Siemens industrial networking products. The flaw occurs during the enabling of fast-xmit, a performance optimization for wireless packet transmission. Race conditions in kernel networking code can lead to use-after-free, null pointer dereference, or state corruption scenarios that may result in denial of service or poten [truncated]
A vulnerability in the Linux kernel's S3 Savage framebuffer driver (fbdev: savage) has been identified and resolved. The issue occurs when the pixclock parameter equals zero, which could lead to undefined behavior. The fix adds proper error handling to exit when this condition is detected. This vulnerability affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST242 [truncated]
A vulnerability in the Linux kernel's SIS framebuffer driver (fbdev: sis) has been identified where a zero-value pixclock parameter could lead to undefined behavior. The issue was resolved by adding an error check that exits when pixclock equals zero, preventing potential divide-by-zero or other arithmetic errors in video mode calculations. Siemens has assessed this vulnerability as affecting certain indu [truncated]
This CVE addresses a vulnerability in the Linux kernel's ext4 filesystem, specifically within the `ext4_mb_try_best_found()` function. The issue involves improper block allocation from corrupted block groups, which could lead to filesystem instability or data integrity problems. The vulnerability was resolved by implementing checks to avoid allocating blocks from corrupted groups. Siemens has identified t [truncated]
A race condition in the Linux kernel ext4 filesystem block allocator could allow allocation from groups with corrupted block bitmaps. The vulnerability exists in ext4_mb_find_by_goal() where the check for a corrupted group block bitmap was not protected by the group lock, potentially permitting block allocation from corrupted groups. Siemens has assessed this vulnerability as 'Misinformed' for affected in [truncated]
A vulnerability in the Linux kernel's asynchronous I/O (AIO) subsystem was resolved by restricting the kiocb_set_cancel_fn() function to I/O operations submitted via libaio. The fix prevents improper use of cancel functions on I/O requests that were not submitted through the legacy libaio interface. Siemens has identified this CVE as affecting certain industrial networking products running SINEC OS, which [truncated]
A vulnerability in the Linux kernel's dm-crypt subsystem, where data could be modified when using authenticated encryption, has been resolved. The issue affected authenticated encryption implementations in device-mapper crypt targets, potentially compromising data integrity guarantees. Siemens has assessed this vulnerability as affecting certain industrial networking products running SINEC OS, including t [truncated]
A vulnerability in the Linux kernel's GTP (GPRS Tunneling Protocol) subsystem could allow use-after-free and null-pointer dereference conditions in the gtp_genl_dump_pdp() function. The issue has been resolved in the upstream Linux kernel. Siemens has assessed this vulnerability as affecting certain industrial networking products running SINEC OS, which incorporates the vulnerable Linux kernel component. [truncated]
This CVE addresses a vulnerability in the Linux kernel's L2TP (Layer 2 Tunneling Protocol) subsystem where an incorrect message length was passed to the `ip6_append_data` function. The vulnerability was resolved by correcting the message length parameter passed during IPv6 packet construction in L2TP. The issue affects Siemens industrial networking products that incorporate the vulnerable Linux kernel cod [truncated]
This CVE addresses a missing terminator in the GPIO descriptor lookup table for the ARM ep93xx platform in the Linux kernel. The gpiod_lookup_table structure requires a null terminator entry to properly signal the end of the table; without it, kernel code iterating through the table may read past valid entries, leading to undefined behavior or potential memory access issues. The fix adds the required term [truncated]
A use-after-free vulnerability in the Linux kernel's Cadence USB3 controller driver (cdns3) was resolved. The flaw occurred in the `cdns3_gadget_ep_disable()` function, where memory could be accessed after being freed during USB gadget endpoint disable operations. This vulnerability affects Siemens industrial networking products that incorporate the vulnerable Linux kernel component, specifically the RUGG [truncated]
A double-free vulnerability in the Linux kernel's Cadence USB3 (cdns3) driver could allow memory corruption when handling zero-length USB packets. The vulnerability was resolved in the Linux kernel. Siemens has identified this CVE as applicable to certain industrial networking products running SINEC OS, including the RUGGEDCOM RST2428P and SCALANCE X-300/XR-300/XC-400/XR-500 families. The CISA advisory IC [truncated]
CVE-2024-26735 is a vulnerability in the Linux kernel's IPv6 Segment Routing (SR) subsystem that could lead to use-after-free and null-pointer dereference conditions. The vulnerability was resolved in the Linux kernel with a fix addressing possible use-after-free and null-pointer dereference scenarios in the IPv6 SR implementation. Siemens has identified this vulnerability as affecting certain industrial [truncated]