Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56724)

mfd: intelsocpmicbxtwc: Use IRQ domain for TMU device. While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has inherited vulnerability. This was unveiled when platformgetirq had started WARN on IRQ 0 that is supposed to be a Lin...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49882)

ext4: In ext4exttrytomergeup, path1.pbh should be set to NULL after it has been released, otherwise it may be released twice. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50279)

dm cache: out-of-bounds access to the dirty bitset when resizing dm- cache checks the dirty bits of the cache blocks to be dropped when shrinking the fast device, but an index bug in bitset iteration causes out-of-bounds access. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46781)

nilfs2: vulnerability involves a use-after-free bug during mount-time recovery, where inodes with recovered data are not freed if an error occurs before the log writer starts, leading to potential memory issues. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49924)

fbdev: pxafb:use after free in pxafbtask. In the pxafbprobe function, it calls the pxafbinitfbinfo function, after which &fbi-task is associated with pxafbtask. Moreover, within this pxafbinitfbinfo function, the pxafbblank function within the &pxafbops struct is capable of scheduling work. If we...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40981)

batman-adv: empty buckets in batadvpurgeorigref are pointing to soft lockups in batadvpurgeorigref. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50201)

linux: drm/radeon: encoder-possibleclones. In the past nothing validated that drivers were populating possibleclones correctly, which resulted in some warnings during driver initialization. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50218)

ocfs2: pass u64 to ocfs2truncateinline maybe overflow. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504681; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53155)

ocfs2: uninitialized value in ocfs2filereaditer. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504542; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50179)

ceph: incorrect Fw reference check when dirtying pages. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504801; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46840)

btrfs: clean up our handling of refs == 0 in snapshot delete. In reada we BUGONrefs == 0, which may be problematic because there is no lock on the extent leave, potentially leading to a transient incorrect answer. In walkdownproc, BUGONrefs == 0 is also used, which could occur due to extent tree...

Siemens SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-46674)

usb: dwc3: st: fix probed platform device ref count on probe error path. The probe function never performs any paltform device allocation, thus error path undoplatformdevalloc is entirely bogus. It drops the reference count from the platform device being probed. If error path is triggered, this...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56633)

tcpbpf: The current sk memory accounting logic in SKREDIRECT is pre-uncharging tosend bytes, which is either msg-sg.size or a smaller value applybytes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56634)

gpio: grgpio: vulnerability due to a missing NULL check in grgpioprobe for the return value of devmkasprintf, leading to a kernel NULL pointer dereference error. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46771)

can: bcm: Remove proc entry when dev is unregistered. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504624; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56595)

jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree. When the value of lp is 0 at the beginning of the for loop, it will become negative in the next assignment and we should bail out. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot f...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-45008)

Input: missing limit on max slots results in too large allocation at inputmtinitslots. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504733;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47659)

smack: tcp: vulnerability in Smack's TCP/IPv4 labeling allows packets to be incorrectly labeled, enabling unauthorized data writing from one label to another. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50007)

ALSA: asihpi: potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVE...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46818)

drm/amd/display: Check gpioid before used as array index. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504743; scriptversion"1.3";...