These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2025-39693 is a medium-severity availability issue published by CISA on 2026-05-12 and republished with Siemens ProductCERT material on 2026-05-14. The supplied advisory says the fix is to update Siemens SIMATIC CN 4100 to V5.0 or later. The underlying technical issue described in the record is a NULL pointer dereference risk in Linux kernel drm/amd/display code.
CVE-2025-39692 is a medium-severity Linux kernel SMB server issue involving ksmbd RDMA teardown ordering. The advisory says that destroying the smb_direct_wq workqueue before stop_sessions() can leave existing connections trying to use a NULL pointer, which can disrupt availability. The CISA CSAF source maps this issue to Siemens SIMATIC CN 4100 vers:intdot/<5.0, but that product mapping is low-confidence [truncated]
CVE-2025-39691 describes a Linux kernel filesystem bug that CISA’s advisory maps to Siemens SIMATIC CN 4100 versions before 5.0. The reported impact is a kernel memory-safety failure in the bh_read() path that can surface as a KASAN-detected stack out-of-bounds condition during NTFS3 mount activity. The supplied CVSS 3.1 vector is 4.4 (Medium), with a local attack requirement and high privileges needed, s [truncated]
CVE-2025-39687 is a medium-severity advisory published on 2026-05-12 that describes a Linux kernel buffer-handling issue: the iio: light: as73211 path should zero buffer holes before the buffer is copied into a kfifo readable by user space. The supplied advisory record maps the issue to Siemens SIMATIC CN 4100 versions before 5.0 and was republished by CISA on 2026-05-14. The main defensive takeaway is to [truncated]
CVE-2025-39686 covers a Linux kernel comedi subsystem bug in insn_rw_emulate_bits(), where the default emulation path for INSN_READ and INSN_WRITE only handled a single sample even when callers requested multiple samples via insn->n. In the advisory text, that mismatch could trigger KASAN kernel-infoleak errors when insn->n was greater than 1, and the scoring reflects a local issue with high availability [truncated]
CVE-2025-39685 describes an input-validation flaw in the Linux kernel’s comedi/pcl726 path where an oversized IRQ selection can trigger an out-of-bounds condition. The source advisory was published on 2026-05-12 and republished on 2026-05-14 by CISA from Siemens ProductCERT material. The advisory recommends updating to V5.0 or later. The source corpus also contains a product-label mismatch: the vulnerabil [truncated]
CVE-2025-39684 describes a kernel memory-disclosure flaw in the Linux comedi subsystem. The affected ioctl paths can copy back more samples than a handler actually initializes, which can leak uninitialized kernel data to user space. The supplied advisory says the fix is to zero uninitialized portions of the buffer before processing each instruction. The source corpus also maps the issue to Siemens SIMATIC [truncated]
Published on 2026-05-12 and modified on 2026-05-14, CVE-2025-39681 describes a Linux kernel defect in Hygon x86 boot initialization. A missing resctrl_cpu_detect() call can leave cache-monitoring state uninitialized, leading to a division-by-zero fault during early boot on systems with X86_FEATURE_CQM* support. The impact described in the supplied corpus is availability-only and can prevent affected machi [truncated]
CVE-2025-39676 is a Linux kernel issue in the qla4xxx SCSI path where an error pointer could be propagated where NULL was expected, leading to a caller Oops. The source advisory was republished by CISA in an ICS context and lists Siemens SIMATIC CN 4100 versions before 5.0 as the affected product scope, but the technical flaw described is in the Linux kernel driver logic. The documented remediation is to [truncated]
CVE-2025-39675 describes a missing null-pointer check in the Linux kernel AMD display HDCP session creation path. If get_first_active_display() returns null because the display list is empty, the function could dereference a null pointer. The advisory reports a fix that adds the check and returns MOD_HDCP_STATUS_DISPLAY_NOT_FOUND instead. The supplied source corpus also maps this issue to a Siemens SIMATI [truncated]
CVE-2025-39673 is a concurrency bug in the Linux kernel PPP forwarding path that can lead to a kernel panic or other denial-of-service condition. The supplied advisory text says the issue comes from unsafe access to the PPP channel list in ppp_fill_forward_path(), including a race between list_empty() and list_first_entry() and a separate NULL-dereference risk when pch->chan is cleared before list removal [truncated]
CVE-2025-38736 is a Linux kernel availability issue affecting MDIO bus initialization in the asix_devices path. According to the supplied advisory text, syzbot reported a shift-out-of-bounds exception because PHY addresses were not constrained to the valid 5-bit range. The fix masks the address with 0x1f so invalid values cannot reach the MDIO initialization logic. The supplied source corpus packages this [truncated]
CVE-2025-38735 describes an availability issue in the Linux kernel gve driver. According to the advisory text, a shutdown path tears down internal driver data structures, but the device can still remain visible long enough for an ethtool operation to be dispatched. If that happens after shutdown(), the driver may dereference freed or NULL pointers and crash the kernel. The advisory says the fix is to call [truncated]
CVE-2025-38732 describes a Linux kernel netfilter flaw in nf_reject handling for loopback packets. The bug can leak a dst refcount when skb dst entries are replaced, which may lead to resource exhaustion and denial-of-service conditions. The source advisory says the fix is to check whether the skb already has a route attached, rather than relying only on the hook.
CVE-2025-38729 describes a Linux kernel ALSA usb-audio parsing flaw where UAC3 power domain descriptors were not validated against their variable bLength. The stated risk is unexpected out-of-bounds access triggered by malicious firmware. CISA republishes the issue in ICSA-26-134-10 alongside Siemens ProductCERT advisory SSA-032379, and the vendor remediation is to update to V5.0 or later for the affected [truncated]
CVE-2025-38728 is a Linux kernel SMB3/ksmbd memory-safety flaw that can trigger a slab out-of-bounds read during mount operations. In the supplied Siemens/CISA advisory, the affected product mapping is Siemens SIMATIC CN 4100 versions before 5.0, with remediation to update to V5.0 or later. The advisory rates the issue as CVSS 5.5/Medium and frames the impact as availability-focused rather than confidenti [truncated]
CVE-2025-38725 is a Linux kernel vulnerability described in the Siemens/CISA advisory set. The issue is in the ax88772 MDIO bus handling for usb net devices: without a phy_mask, the driver may create extra PHY devices, and only one binds to the network PHY driver. During suspend/resume, non-main PHY devices can trigger a NULL pointer dereference in the PHY state machine. The supplied remediation is to upd [truncated]
CVE-2025-38723 is described in the supplied advisory as a LoongArch Linux kernel BPF tailcall issue where an extra pass of bpf_int_jit_compile() skips JIT context initialization, leaving out_offset at -1 and causing an incorrect negative jump offset in emit_bpf_tail_call. The source states this can produce malformed generated assembly and, in the provided self-test scenario, a watchdog soft lockup. The ad [truncated]
CVE-2025-38715 is a memory-safety issue in the Linux kernel HFS code path, described in the supplied advisory text as a slab-out-of-bounds condition in hfs_bnode_read(). The fix adds offset validation and request-length correction and applies those checks across hfs_bnode_read(), hfs_bnode_write(), hfs_bnode_clear(), hfs_bnode_copy(), and hfs_bnode_move() to prevent access outside allocated memory. In the [truncated]
CVE-2025-38714 is a Linux kernel memory-safety issue in hfsplus_bnode_read() that can produce a slab-out-of-bounds read. The supplied advisory data shows the fault being hit under KASAN during HFS+ metadata operations and assigns CVSS 3.1 vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. Because the source corpus is a republished Siemens/CISA advisory with product metadata that does not clearly match the Linux [truncated]
CVE-2025-38713 describes a Linux kernel HFS+ bug in the hfsplus_readdir() path that can reach hfsplus_uni2asc() and trigger a slab-out-of-bounds read. The advisory text includes a KASAN report showing the fault during getdents64/readdir activity, and the issue is rated HIGH severity in the supplied CVSS vector. From a defensive standpoint, this is most relevant to systems that mount or process HFS+ filesy [truncated]
CVE-2025-38712 is a denial-of-service issue in the Linux kernel hfsplus path. According to the advisory text, if a volume header contains erroneous values that do not match the filesystem’s actual state, hfsplus_fill_super() may assume the attributes file does not yet exist and later reach BUG_ON() in hfsplus_create_attributes_file(). The fix replaces the BUG_ON() with an -EIO error and advises running fs [truncated]
CVE-2025-38711 describes a deadlock in the Linux kernel SMB server (ksmbd) path when smb2_create_link() is used with ReplaceIfExists and the target name already exists. The supplied advisory says the parent directory can remain locked across file removal and link creation, causing ksmbd_vfs_link() to try to lock the same parent again and deadlock. The reported fix moves the unlock before the link operatio [truncated]
CVE-2025-38707 is described in the source advisory as a Linux kernel ntfs3 sanity-check issue where the file name length should be smaller than the directory entry size. The advisory’s CVSS vector indicates a local, low-privilege problem with no confidentiality or integrity impact and high availability impact. The source record maps the issue to Siemens SIMATIC CN 4100 versions earlier than 5.0 and recomm [truncated]
CVE-2025-38706 is a medium-severity null-pointer dereference in the Linux kernel ASoC core path as documented in the CISA/Siemens advisory. The reported impact is primarily availability: under certain topology-loading and module-removal conditions, the kernel can dereference a NULL runtime pointer and crash. The advisory ties the issue to Siemens SIMATIC CN 4100 versions below the vendor-fixed release threshold.
CVE-2025-38700 is a Linux kernel libiscsi/iSER vulnerability republished in Siemens advisory ICSA-26-134-10 for SIMATIC CN 4100 vers:intdot/<5.0. The issue occurs when ib_fast_reg_mr allocation fails during iSER setup and iscsi_conn->dd_data is initialized even though no memory was allocated. During teardown, that bad state can lead to an invalid pointer dereference and a kernel panic. CISA’s advisory met [truncated]
CVE-2025-38699 is a double-free issue in the Linux kernel's scsi:bfa path. According to the advisory text, bfad_im_probe() can free bfad->im during initialization failure without clearing the pointer, and later bfad_im_probe_undo() may free it again during driver shutdown. CISA's CSAF advisory maps the issue to Siemens SIMATIC CN 4100 versions earlier than 5.0 and points to Siemens remediation to update t [truncated]
CVE-2025-38698 was published by CISA on 2026-05-12 and republished on 2026-05-14 as ICSA-26-134-10. The supplied advisory text describes a corrupted regular file with a negative i_size value and says a check should be added when opening the file to avoid later failures. The source corpus also maps the advisory to Siemens SIMATIC CN 4100 versions before 5.0, but the description references the Linux kernel [truncated]
CVE-2025-38697 is described in the source corpus as a Linux kernel JFS bounds-check problem in dbAllocAG: the tree index is computed without an upper-bound check against the stree size, which could matter when filesystem metadata are corrupted. The same advisory metadata also maps the issue to Siemens SIMATIC CN 4100 versions earlier than 5.0, but that product mapping is low confidence and should be verif [truncated]
CVE-2025-38696 is a denial-of-service issue in the Linux kernel MIPS stack layout code. According to the supplied advisory text, stack_top() could dereference a NULL ABI pointer for tasks that do not have an ABI or vDSO mapping, such as kthreads, which can crash the kernel. The supplied CISA CSAF item was published on 2026-05-12 and republished on 2026-05-14 with Siemens ProductCERT SSA-032379 content. Th [truncated]