Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40981)

batman-adv: empty buckets in batadvpurgeorigref are pointing to soft lockups in batadvpurgeorigref. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53155)

ocfs2: uninitialized value in ocfs2filereaditer. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504542; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46818)

drm/amd/display: Check gpioid before used as array index. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504743; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56630)

ocfs2: iput is not called when newinode succeeded and dquotinitialize failed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504545;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47698)

drivers: media: dvb-frontends/rtl2832: An out-of-bounds access occurs if rtl2832pidfilter exceed 31, which was not verified. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56705)

media: atomisp: In iacss3astatisticsallocate, there is no check on the allocation result of the rgbydata memory. If rgbydata is not successfully allocated, it may trigger the asserthoststats-rgbydata assertion in iacsss3ahmemdecode. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46828)

sched: schcake: fix bulk flow accounting logic for host fairness In schcake, we keep track of the count of active bulk flows per host, when running in dst/src host fairness mode, which is used as the round-robin weight when iterating through flows. This plugin only works with Tenable.ot. Please...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56623)

scsi: qla2xxx: System crash is observed with stack trace warning of use after free. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504554;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49966)

ocfs2: cancel dqisyncwork before freeing oinfo ocfs2globalreadinfo will initialize and schedule dqisyncwork at the end. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; i...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46832)

MIPS: cevt-r4k: Don't call getc0compareint if timer irq is installed This avoids warning: 0.118053 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:283 Caused by getc0compareint on secondary CPU. We also skipped saving IRQ number to struct clockeventdevice cd as it's...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42247)

wireguard: allowedips: unaligned 64-bit memory accesses. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504555; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47663)

staging: iio: frequency: ad9834: In ad9834writefrequency clkgetrate can return 0. In such case ad9834calcfreqreg call will lead to division by zero. Checking 'if fout clkfreq / 2' doesn't protect in case of 'fout' is 0. ad9834writefrequency is called from ad9834write, where fout is taken from tex...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41078)

btrfs: qgroup: quota root leak after quota disable failure. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504699; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56645)

can: j1939: vulnerability involves a reference count underflow issue in j1939sessionnew, which is fixed by adding an extra skbget to match the behavior of j1939sessionskbqueue. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40929)

wifi: iwlwifi: mvm: check nssids before accessing the ssids.In some versions of cfg80211, the ssids poinet might be a valid one even though nssids is 0. Accessing the pointer in this case will cuase an out-of-bound access. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42076)

net: can: j1939: unused data in j1939sendone. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504621; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46723)

drm/amdgpu: vulnerability due to an out-of-bounds read warning when accessing ucode. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504680;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-44995)

net: hns3: a deadlock problem when config TC during resetting. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504604; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56741)

apparmor: test: Fix memory leak for aaunpackstrdup The string allocated by kmemdup in aaunpackstrdup is not freed and cause following memory leaks. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42143)

orangefs: out-of-bounds fsid access. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504495; scriptversion"1.2";...