Siemens SCALANCE and RUGGEDCOM Devices Improper Control of Resource Identifiers ('Resource Injection') (CVE-2024-42244)

USB: serial: mos7840: fix crash on resume SinceUSB: serial: use generic method if no alternative is provided in usb serial layer, USB serial core calls the generic resume implementation when the driver has not provided one. This can trigger a crash on resume with mos7840 since support for multipl...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50184)

virtiopmem: Check device status before requesting flush. If a pmem device is in a bad status, the driver side could wait for host ack forever in virtiopmemflush, causing the system to hang. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46819)

drm/amdgpu: the warning dereferencing obj for nbiov74 if rasmanager obj null, don't print NBIO err data. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56629)

HID: wacom: Due to incorrect dev-product reporting by certain devices, null pointer dereferences occur when dev-product is empty, leading to potential system crashes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEV...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49895)

drm/amd/display: vulnerability caused by adding a check to ensure the index 'i' is within bounds before accessing transfer function points in cmhelpertranslatecurvetodegammahwformat, preventing buffer overflow errors. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46721)

apparmor: fix possible NULL pointer dereference. profile-parent-dentsAAFSPROFDIR could be NULL only if its parent is made from createmissingancestors.. and 'ent-old' is NULL in aareplaceprofiles... In that case, it must return an error code and the code, -ENOENT represents its state that the path...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41034)

nilfs2: kernel bug on rename operation of broken directory. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504476; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-47756)

PCI: keystone: Fix if-statement expression in kspciequirk. This code accidentally uses && where || was intended. It potentially results in a NULL dereference. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-44969)

s390/sclp: vulnerability could lead to data corruption if a Store Data operation is interrupted and the halt attempt fails, which was resolved by preventing the release of data buffers in such cases. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56615)

bpf: OOB devmap writes when deleting elements against XSKMAP which also applies to DEVMAP - the index used for accessing map entry, due to being a signed integer, causes the OOB writes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50267)

USB: serial: ioedgeport: fix use after free in debug printk The devdbg&urb-dev-dev, ... which happens after usbfreeurburb is a use after free of the urb pointer. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50295)

net: arc: A warning is shown because ndev-dev and pdev-dev are not the same device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504563;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47679)

vfs: race between eviceinodes and findinode&iput. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504534; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50099)

arm64: probes: Broken LDR literal uprobe support. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504693; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41041)

udp: small race window. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504778; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40932)

drm/exynos/vidi: memory leak in .getmodes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504673; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42145)

IB/core: an unbounded UMAD receive list, poses a risk of uncontrolled growth. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504750;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56605)

Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2capsockcreate btsockalloc allocates the sk object and attaches it to the provided sock object. On error l2capsockalloc frees the sk object, but the dangling pointer is still attached to the sock object, which may create use-after-fr...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56723)

mfd: intelsocpmicbxtwc: Use IRQ domain for PMIC devices. While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has inherited vulnerabilities. This was unveiled when platformgetirq had started WARN on IRQ 0 that is supposed to be a...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49933)

blkiocost: fix more out of bound shifts. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504635; scriptversion"1.3";...