These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
This CVE addresses a vulnerability in the Linux kernel's rt2x00 wireless driver, specifically related to beacon queue handling during hardware reset operations. The vulnerability was resolved by implementing a restart mechanism for the beacon queue when a hardware reset occurs. The issue affects Siemens industrial networking products running SINEC OS, including the RUGGEDCOM RST2428P and SCALANCE X-family [truncated]
CVE-2023-52594 is an array-index-out-of-bounds read vulnerability in the Linux kernel's ath9k wireless driver, specifically within the ath9k_htc_txstatus() function. The vulnerability was resolved in the Linux kernel with a fix for the potential out-of-bounds read condition. Siemens has assessed this CVE as affecting multiple industrial networking product families including RUGGEDCOM RST2428P and SCALANCE [truncated]
CVE-2023-52587 is a vulnerability in the Linux kernel's IP over InfiniBand (IPoIB) driver related to improper locking of multicast list structures. The vulnerability was resolved with a fix to the mcast list locking mechanism. According to the source advisory, the impact assessment for affected Siemens products is categorized as 'Misinformed', indicating the vulnerability's applicability or severity may h [truncated]
CVE-2023-52581 is a memory leak vulnerability in the Linux kernel's netfilter nf_tables subsystem, specifically triggered when more than 255 elements expire simultaneously. The vulnerability was resolved in the Linux kernel with a fix for the memory leak condition. Siemens has identified this CVE as affecting certain industrial networking products running SINEC OS, including the RUGGEDCOM RST2428P and SCA [truncated]
A use-after-free (UAF) vulnerability in the Linux kernel's ieee802154 ca8210 driver was resolved via a kernel patch. The flaw existed in the ca8210_probe function and could potentially allow memory corruption. Siemens has assessed this CVE as 'Misinformed' for its affected industrial networking products, indicating the vulnerability does not apply to these systems as initially reported. The CVE was publis [truncated]
This CVE addresses a use-after-free vulnerability in the ravb (Renesas Ethernet AVB) driver within the Linux kernel, specifically in the ravb_tx_timeout_work() function. The vulnerability was resolved in the Linux kernel, and Siemens has assessed its impact on industrial networking products running SINEC OS. According to CISA's ICS advisory ICSA-25-226-15 (published 2025-08-12, updated 2026-02-25), Siemen [truncated]
A vulnerability in the Linux kernel's NFC (Near Field Communication) subsystem, specifically in the NCI (NFC Controller Interface) protocol handling, has been identified and resolved. The issue involved insufficient validation of requested protocols, which could lead to out-of-bounds access. Siemens has assessed this vulnerability as having no security impact on its affected industrial networking products [truncated]
CVE-2023-52504 is a Linux kernel vulnerability affecting the x86/alternatives subsystem. The issue was resolved by disabling Kernel Address Sanitizer (KASAN) in the apply_alternatives() function. KASAN is a dynamic memory error detector for the Linux kernel; when active during alternative instruction patching, it could interfere with the low-level code modification process that occurs during early boot or [truncated]
A race condition vulnerability exists in the Linux kernel's Near Field Communication (NFC) subsystem, specifically within the `nfc_llcp_sock_get()` and `nfc_llcp_sock_get_sn()` functions. The vulnerability was resolved in the Linux kernel with fixes to address race conditions in these socket lookup functions. Siemens has assessed this CVE as applicable to certain industrial networking products running SIN [truncated]
CVE-2023-52486 is a vulnerability in the Linux kernel's Direct Rendering Manager (DRM) subsystem. The issue involves improper reference counting of framebuffers (fb) during deadlock handling scenarios, where the same framebuffer could be unreferenced multiple times by mistake. This use-after-free style error could lead to memory corruption or system instability. The vulnerability was resolved in the Linux [truncated]
A vulnerability in the Linux kernel's HID Logitech HID++ driver could cause a kernel crash when a Logitech receiver is disconnected via USB. The issue stems from improper handling of USB disconnect events in the hid-logitech-hidpp driver, potentially leading to a use-after-free or null pointer dereference condition. Siemens has assessed this vulnerability as affecting certain industrial networking product [truncated]
A vulnerability in the Linux kernel's USB hub driver could allow improper access to uninitialized Binary Object Store (BOS) descriptors. The issue stems from missing guards against accessing BOS descriptors before they are properly initialized during USB device enumeration. This vulnerability affects Siemens industrial networking products running SINEC OS, including RUGGEDCOM RST2428P and SCALANCE switch [truncated]
A vulnerability in the Linux kernel's networking stack, specifically in the skb_segment() function, could allow an MSS (Maximum Segment Size) overflow condition. The vulnerability has been resolved in the Linux kernel. Siemens has identified this CVE as affecting certain industrial networking products including the RUGGEDCOM RST2428P and SCALANCE families, though the CISA CSAF advisory marks the impact as [truncated]
A vulnerability in the Linux kernel's netfilter subsystem, specifically within the nft_set_rbtree module, has been identified. The issue involves improper handling of garbage collection for new elements during transactions, which could lead to use-after-free conditions or memory corruption. The vulnerability was resolved by modifying the garbage collection logic to skip synchronous garbage collection for [truncated]
CVE-2023-52340 is a denial-of-service vulnerability in the Linux kernel's IPv6 implementation, specifically within net/ipv6/route.c. The vulnerability exists in Linux kernel versions before 6.3, where the max_size threshold for IPv6 routing tables can be easily consumed. This consumption can be triggered when IPv6 packets are sent in a loop via a raw socket, resulting in network unreachability errors and [truncated]
CVE-2023-51782 is a use-after-free vulnerability in the Linux kernel's ROSE (Radio Amateur Packet X.25 PLP) protocol implementation, specifically in the `rose_ioctl` function in `net/rose/af_rose.c`. The vulnerability stems from a race condition involving `rose_accept` and affects Linux kernel versions before 6.6.8. Siemens has identified this CVE as applicable to certain industrial networking products ru [truncated]
CVE-2023-51781 is a use-after-free vulnerability in the Linux kernel's AppleTalk networking subsystem, specifically in the `atalk_ioctl` function in `net/appletalk/ddp.c`. The vulnerability stems from a race condition involving `atalk_recvmsg` that can trigger memory corruption. The issue affects Linux kernel versions prior to 6.6.8. This CVE was published on August 12, 2025, and last modified on February [truncated]
A use-after-free vulnerability exists in the Linux kernel's ATM (Asynchronous Transfer Mode) networking subsystem. The flaw resides in do_vcc_ioctl within net/atm/ioctl.c, triggered by a race condition between vcc_recvmsg operations. This vulnerability affects Linux kernel versions prior to 6.6.8. The issue has been identified in Siemens industrial networking products running affected kernel versions, spe [truncated]
A use-after-free vulnerability exists in the NVMe-oF/TCP subsystem of the Linux kernel, specifically in the `nvmet_tcp_free_crypto` function within `drivers/nvme/target/tcp.c`. The vulnerability stems from a logical bug that can lead to use-after-free and double-free conditions. According to the source advisory, this issue may allow a malicious local privileged user to achieve remote code execution or loc [truncated]
A NULL pointer dereference vulnerability exists in the Linux kernel's NFC (Near Field Communication) subsystem, specifically in the `send_acknowledge` function within `net/nfc/nci/spi.c`. This flaw affects Linux kernel versions prior to 6.5.9. The vulnerability was published in the CVE database on August 12, 2025, with subsequent modifications through February 25, 2026. Siemens has identified this vulnera [truncated]
CVE-2023-45863 is a Linux kernel flaw in lib/kobject.c that can lead to a fill_kobj_path out-of-bounds write when a local attacker with root access triggers a race condition. Siemens maps this issue to 19 SCALANCE W-series products in ICSA-25-044-09 and recommends updating to V3.0.0 or later.
A vulnerability in GCC-based toolchains targeting AArch64 allows attackers to bypass the -fstack-protector security feature when exploiting buffer overflows in dynamically-sized local variables (C99 VLA or alloca()). While stack protection works correctly for statically-sized variables, the failure to protect dynamic allocations enables undetected exploitation of existing buffer overflow conditions. Succe [truncated]
A use-after-free vulnerability exists in the Linux kernel's Renesas Ethernet AVB driver (ravb_main.c) affecting kernel versions through 6.3.8. The flaw occurs in the ravb_remove function during driver unbinding, where a race condition can lead to memory corruption. Siemens has identified this vulnerability as affecting industrial networking products including the RUGGEDCOM RST2428P and SCALANCE X-family s [truncated]
A use-after-free vulnerability exists in the Linux kernel's vc_screen driver (drivers/tty/vt/vc_screen.c) within the vcs_read function. This flaw affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST2428P and SCALANCE X-family switches. The vulnerability requires local user access to exploit and can result in system crashes or information disclosure through kernel [truncated]
A Linux kernel vulnerability in the /proc/cpuinfo implementation that generates runtime warnings when specific debug configuration options are enabled. The issue occurs when CONFIG_CPUMASK_OFFSTACK and CONFIG_DEBUG_PER_CPU_MAPS are both selected, causing cpu_max_bits_warn() to trigger warnings during cpuinfo display operations. This represents a local availability impact with medium severity.
A vulnerability in the Linux kernel's netfilter nf_tables subsystem could allow improper handling of flowtable hooks during network namespace exit. The issue stems from missing unregistration of flowtable hooks when a network namespace exits, potentially leading to use-after-free conditions. Siemens has assessed this vulnerability as affecting certain industrial networking products running SINEC OS, inclu [truncated]
A null-pointer dereference vulnerability exists in the Linux kernel's lgdt3306a media driver. The flaw occurs in the lgdt3306a_probe function when the driver fails to validate whether platform_data is provided by the client before passing it to kmemdup. This results in a kernel crash when attempting to read from address 0x0000000000000000, as detected by KASAN. The vulnerability was resolved by adding a n [truncated]
A use-after-free vulnerability in the SCSI core subsystem of the Linux kernel. The vulnerability was originally identified in 2022 but was not assigned a CVE identifier until August 2025. According to CISA's ICS advisory ICSA-25-226-07, this vulnerability affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST2428P and SCALANCE X-family switches. The advisory's thre [truncated]
CVE-2022-48655 is a HIGH severity vulnerability (CVSS 8.1) in the Linux kernel's ARM SCMI firmware subsystem. The issue involves missing bounds checking when accessing reset domain descriptors by index, which could lead to out-of-bounds memory access if an SCMI driver misbehaves. The vulnerability was resolved by adding internal consistency checks before accessing domain descriptors. Siemens has identifie [truncated]
CVE-2022-0778 affects Siemens SCALANCE wireless devices that use OpenSSL during certificate or key parsing. A malformed certificate or private key with invalid explicit elliptic curve parameters can trigger an infinite loop in BN_mod_sqrt(), creating a denial-of-service condition. Siemens’ advisory maps the issue to multiple SCALANCE W7xx/W78x device variants and recommends upgrading to version 6.6.0 or later.