These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2025-38721 describes an availability issue in Linux kernel netfilter conntrack table dumping logic. Under a narrow condition, ctnetlink_dump_table() can take an extra reference on a conntrack object and never release it, which can prevent cleanup from completing and leave netns dismantle or conntrack removal waiting indefinitely. The supplied advisory corpus maps this issue to Siemens SIMATIC CN 4100 [truncated]
CVE-2025-38708 is a high-severity Linux kernel DRBD vulnerability involving a missing kref_get in handle_write_conflicts. In the affected write-conflict path, that mistake can lead to premature drbd_destroy_device, a use-after-free, and kernel crashes. The supplied CISA/Siemens advisory maps the issue to Siemens SIMATIC CN 4100 versions before 5.0 and recommends updating to V5.0 or later.
CVE-2025-38702 is a high-severity Linux kernel framebuffer registration bug described in a CISA CSAF advisory for Siemens SIMATIC CN 4100. The issue can lead to a buffer overflow in do_register_framebuffer() when registration bookkeeping leaves NULL gaps or when the registration loop can advance past the end of registered_fb[]. The source advisory recommends updating to V5.0 or later.
CVE-2025-38701 describes an ext4 robustness issue in the Linux kernel where an inode can have INLINE_DATA_FL set without the expected system.data xattr, leading to a BUG_ON and potential denial of service. The fix replaces the BUG_ON behavior with error reporting so the kernel treats the situation as filesystem corruption instead of crashing. The supplied advisory context maps the issue to Siemens SIMATIC [truncated]
CVE-2025-38691 is a medium-severity availability issue described in the advisory text as a Linux kernel pNFS block/scsi layout bug. The published source says the problem can occur during repeated attempts to encode extents, where a retry path reallocates a larger buffer but initializes the page array only after the retry loop. The same source also notes that oversized layoutcommit buffers may exceed the m [truncated]
CVE-2025-38685 is a high-severity memory corruption issue in the Linux kernel fbdev console/framebuffer mapping path. The advisory says a userspace ioctl (FBIOPUT_CON2FBMAP) can map a console to a framebuffer, but if the required console resize fails and execution continues, later screen-update logic can mix stale vc_data references with the newly mapped framebuffer state. That unsafe state can lead to an [truncated]
CVE-2025-38614 is a Linux kernel eventpoll/epoll recursion-bounding flaw that can allow excessively deep nesting and create a denial-of-service risk. The source advisory ties the issue to Siemens SIMATIC CN 4100 versions prior to 5.0 and states the fix is to update to V5.0 or later. Because the attack conditions require local access and privileges, this is best viewed as a targeted stability and availabil [truncated]
CVE-2025-38499 is a Linux kernel mount-handling vulnerability tracked in Siemens advisory ICSA-25-162-05 / SSA-082556 for SIMATIC S7-1500 CPU family products. The kernel fix description says clone_private_mnt() did not verify CAP_SYS_ADMIN in the correct user namespace, which could allow a clone to expose content hidden by a mount that should not be undoable. CISA’s CSAF record assigns a Medium CVSS 5.5 s [truncated]
CVE-2025-38498 is a Linux kernel flaw in do_change_type() that was fixed to refuse operations on unmounted or "not ours" mounts. The correction ensures propagation settings can only be changed for mounts in the caller's mount namespace, aligning permission checks with the rest of mount(2). CISA republished Siemens advisory SSA-089022 as ICSA-26-043-06 for affected Siemens industrial products running SINEC [truncated]
CVE-2025-38477 was publicly disclosed in CISA’s ICSA-25-162-05 advisory on 2025-06-10 and last updated on 2026-05-14. The advisory ties a Linux kernel sch_qfq race condition to affected Siemens SIMATIC S7-1500 CPU family products, with potential for local denial of service through NULL dereference or use-after-free conditions. Siemens/CISA note that no fix is currently available and recommend access restr [truncated]
CVE-2025-38471 describes a Linux kernel TLS use-after-free that can be reached in the receive path when queue state is checked against an old skb after more aggressive TCP skb compaction. In the cited CISA/Siemens advisory record, the issue is associated with specific Siemens SIMATIC S7-1500 CPU family products, is rated CVSS 7.8 (High), and the source states that no fix is currently available.
CVE-2025-38470 is a Linux kernel VLAN handling flaw republished by CISA in Siemens’ industrial advisory ICSA-25-162-05. In affected Siemens SIMATIC S7-1500 CPU models with the additional GNU/Linux subsystem, toggling the rx-vlan-filter feature during runtime can leave VLAN 0 reference counts out of sync. The documented outcomes are either a memory leak or a null-pointer/BUG_ON condition in VLAN unregister [truncated]
CVE-2025-38468 is a Linux kernel denial-of-service issue disclosed in Siemens and CISA advisories for several SIMATIC S7-1500 CPU 1518/1518F MFP variants. The bug is in traffic-control queue handling: under a specific local qdisc interaction, htb_lookup_leaf can encounter an empty red-black tree and hit a BUG_ON, which can crash the subsystem. The advisory rates the issue CVSS 3.1 5.5 (medium) with local [truncated]
CVE-2025-38466 is a Linux kernel issue in uprobes handling that led to a reversion to requiring CAP_SYS_ADMIN. The source text says the kernel can verify that an instruction exists at a requested offset, but it cannot always determine whether that offset corresponds to the intended execution stream; the advisory also notes risk on architectures that mix data in the text segment. Siemens’ CSAF advisory map [truncated]
CVE-2025-38465 describes a Linux kernel netlink memory-accounting flaw where sk->sk_rmem_alloc can wrap around and stop enforcing the receive-buffer limit correctly. In the provided advisory text, that can let a single local socket keep accumulating skb buffers until memory exhaustion and OOM-driven denial of service. The source advisory in this corpus associates the CVE with Siemens SIMATIC S7-1500 CPU f [truncated]
CVE-2025-38457 is a Linux kernel queuing discipline (qdisc) bug that can lead to a local denial of service when a qdisc is created or modified with a parent that is not a valid class. The vulnerability is described in Siemens' CSAF advisory ICSA-25-162-05 and is listed for several SIMATIC S7-1500 CPU 1518-4/1518F-4 PN/DP MFP products. The supplied advisory states that the issue can reach a null class duri [truncated]
CVE-2025-38451 is a local Linux kernel availability issue tied to md/md-bitmap bitmap_get_stats(). On affected Siemens SIMATIC S7-1500 CPU models, a missing or inconsistent super-block check can lead to a kernel GPF/Oops when stats are read, potentially disrupting the device's GNU/Linux subsystem.
CVE-2025-38430 concerns a Linux kernel nfsd check that can examine request state without first confirming the request is an NFSv4 COMPOUND operation. The advisory published by CISA on 2025-06-10, based on Siemens ProductCERT material, maps the issue to several SIMATIC S7-1500 CPU MFP products and states that no fix is currently available. The source CVSS vector is local, low-privilege, no-user-interaction [truncated]
CVE-2025-38400 is a reliability and availability issue tied in the supplied advisory corpus to Siemens SIMATIC S7-1500 CPU product entries, while the vulnerability text itself describes a Linux kernel NFS proc cleanup bug. The reported failure path leaves /proc/net/rpc/nfs in place when nfs_fs_proc_net_init() fails, and a later rpc_proc_exit() cleanup attempt logs a warning because /proc/net/rpc is not em [truncated]
CVE-2025-38393 is a race-condition issue in the Linux kernel’s NFSv4/pNFS path that can leave tasks stuck waiting for layout drain and writeback progress. In Siemens’ advisory for the SIMATIC S7-1500 CPU family, the impact is framed as an availability problem affecting the Linux-based subsystem, with mitigations provided and no fix available at the time of publication.
CVE-2025-38364 is a Linux kernel flaw in maple_tree preallocation handling that can suppress expected allocations and, in some paths, lead to a WARN_ON followed by a NULL pointer dereference. In the supplied Siemens/CISA advisory context, the issue is tied to SIMATIC S7-1500 CPU family products that expose an additional GNU/Linux subsystem, with no fix listed in the source advisory.
CVE-2025-38350 is a Linux kernel traffic-control bug that can lead to a use-after-free when certain classful qdiscs empty a child class without reliably notifying the parent. Siemens’ advisory maps the issue to SINEC OS firmware and affected industrial networking products, with a fix available in V3.3 or later. CISA’s CSAF record shows the advisory was first published on 2026-01-28 and updated through 2026-02-25.
CVE-2025-38342 is a Linux kernel software-node bounds-check flaw that can let malformed property data trigger out-of-bounds access in software_node_get_reference_args(). In the supplied advisory corpus, CISA and Siemens map the issue to several SIMATIC S7-1500 CPU family products and state that no fix is available in the referenced release, so operators should rely on mitigations and access restrictions u [truncated]
CVE-2025-38312 is a denial-of-service issue tied to a Linux kernel framebuffer conversion path referenced in Siemens’s SIMATIC S7-1500 advisory. The problem can lead to a kernel oops if an internal refresh value overflows to zero and is then used as a divider. Siemens’s advisory lists affected SIMATIC S7-1500 CPU family products, states that no fix was available at the time of publication, and recommends [truncated]
CVE-2025-38280 is a Linux kernel BPF/JIT handling issue surfaced in Siemens’s SIMATIC S7-1500 CPU family advisory. The problem can cause the kernel to wrongly accept a program after JIT compilation fails, and later trigger a WARN_ON_ONCE when the program runs. The source advisory rates it HIGH (CVSS 7.8) and lists no fixed version at publication time, so affected operators should treat it as a compensatin [truncated]
CVE-2025-38236 is a high-severity use-after-free in Linux kernel AF_UNIX stream receive handling. In the Siemens advisory, it is mapped to SIMATIC S7-1500 CPU MFP products that include an additional GNU/Linux subsystem. The source notes no fix was available at publication time and recommends restricting shell access and software provenance on affected devices.
CVE-2025-38231 is a Linux kernel nfsd availability issue described in Siemens/CISA advisories for several SIMATIC S7-1500 CPU MFP products. The flaw can lead to a NULL pointer dereference when delayed work starts before nfsd_ssc initialization completes, which may happen if the kernel is waiting too long for userspace responses. The advisory states that no fix is currently available and recommends compens [truncated]
CVE-2025-38222 is an integer-overflow defect in the Linux kernel ext4 inline_data write path that can lead to a kernel BUG/Oops when a write with a very large offset is processed. The supplied Siemens/CISA advisory corpus associates this CVE with SIMATIC S7-1500 CPU family products and states that no fix is currently available, so the practical response is to reduce local access to the embedded GNU/Linux [truncated]
CVE-2025-38212 is a HIGH-severity use-after-free issue in Linux kernel IPCS lookup handling that Siemens maps to several SIMATIC S7-1500 CPU family products. The supplied advisory says there is currently no fix available, so affected operators should rely on compensating controls and closely track Siemens ProductCERT and CISA updates.
CVE-2025-38198 is a Linux kernel fbcon defect called out in Siemens/CISA advisory ICSA-25-162-05 for the SIMATIC S7-1500 CPU family. The supplied description says writing to the store_modes sysfs node can reach an unregistered console path where con2fb_map contains -1, leading to an array-index-out-of-bounds access. The described fix is to have fbcon_info_from_console() return NULL instead of indexing wit [truncated]