Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40947)

ima: Avoid blocking in RCU read-side critical section, a panic happens in imamatchpolicy. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504587;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50287)

media: v4l2-tpg: prevent the risk of a division by zero As reported by Coverity, the logic at tpgprecalculateline blindly rescales the buffer even when scaledwitdh is equal to zero. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46844)

um: line: always fill errorout in setuponeline The pointer isn't initialized by callers, but I have encountered cases where it's still printed; initialize it in all possible cases in setuponeline. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40990)

ptp: integer overflow in maxvclocksstore. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504686; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56723)

mfd: intelsocpmicbxtwc: Use IRQ domain for PMIC devices. While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has inherited vulnerabilities. This was unveiled when platformgetirq had started WARN on IRQ 0 that is supposed to be a...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47663)

staging: iio: frequency: ad9834: In ad9834writefrequency clkgetrate can return 0. In such case ad9834calcfreqreg call will lead to division by zero. Checking 'if fout clkfreq / 2' doesn't protect in case of 'fout' is 0. ad9834writefrequency is called from ad9834write, where fout is taken from tex...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46817)

drm/amd/display: Stop amdgpudm initialize when stream nums greater than 6. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504454;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-44998)

atm: idt77252: use after free in dequeuerx. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504512; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50194)

arm64: probes: Fix uprobes for big-endian kernels The arm64 uprobes code is broken for big-endian kernels as it doesn't convert the in- memory instruction encoding which is always little-endian into the kernel's native endianness before analyzing and simulating instructions. This plugin only work...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56629)

HID: wacom: Due to incorrect dev-product reporting by certain devices, null pointer dereferences occur when dev-product is empty, leading to potential system crashes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEV...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46721)

apparmor: fix possible NULL pointer dereference. profile-parent-dentsAAFSPROFDIR could be NULL only if its parent is made from createmissingancestors.. and 'ent-old' is NULL in aareplaceprofiles... In that case, it must return an error code and the code, -ENOENT represents its state that the path...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-44949)

parisc: fix a possible DMA corruption ARCHDMAMINALIGN was defined as 16 - this is too small - it may be possible that two unrelated 16-byte allocations share a cache line. If one of these allocations is written using DMA and the other is written using cached write, the value that was written with...

Siemens SCALANCE and RUGGEDCOM Devices Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (CVE-2024-42232)

libceph: fix race between delayedwork and cephmoncstop The way the delayed work is handled in cephmoncstop is prone to races with monfault and possibly also finishhunting. Both of these can requeue the delayed work which wouldn't be canceled by any of the following code in case that happens after...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56781)

powerpc/prominit: missing powermac size-cells. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504722; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56596)

jfs: array-index-out-of-bounds in jfsreaddir. The stbl might contain some invalid values. Added a check to return error code in that case. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46832)

MIPS: cevt-r4k: Don't call getc0compareint if timer irq is installed This avoids warning: 0.118053 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:283 Caused by getc0compareint on secondary CPU. We also skipped saving IRQ number to struct clockeventdevice cd as it's...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41034)

nilfs2: kernel bug on rename operation of broken directory. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504476; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56531)

ALSA: caiaq: OTOH, the current code uses sndcardfree at disconnection, but this waits for the close of all used fds, hence it can take long. It eventually blocks the upper layer USB ioctls, which may trigger a soft lockup. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56603)

net: afcan: do not leave a dangling sk pointer in cancreate. On error cancreate frees the allocated sk object, but sockinitdata has already attached it to the provided sock object. This will leave a dangling sk pointer in the sock object and may cause use-after-free later. This plugin only works...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56747)

scsi: qedi: vulnerability involves a potential memory leak in qediallocandinitsb where the DMA memory sbvirt is not released upon failure, which is fixed by adding dmafreecoherent to free the memory, similar to other functions like qedrallocmemsb and qedeallocmemsb. This plugin only works with...