Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47667)

PCI: keystone: Missing workaround for Errata i2037 AM65x SR 1.0. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504745; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56648)

net: hsr: avoid potential out-of-bound access in fillframeinfo. By extending the check to cover packets with only 14 bytes, it prevents uninitialized values from causing undefined behavior or security issues. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50194)

arm64: probes: Fix uprobes for big-endian kernels The arm64 uprobes code is broken for big-endian kernels as it doesn't convert the in- memory instruction encoding which is always little-endian into the kernel's native endianness before analyzing and simulating instructions. This plugin only work...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56629)

HID: wacom: Due to incorrect dev-product reporting by certain devices, null pointer dereferences occur when dev-product is empty, leading to potential system crashes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEV...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46721)

apparmor: fix possible NULL pointer dereference. profile-parent-dentsAAFSPROFDIR could be NULL only if its parent is made from createmissingancestors.. and 'ent-old' is NULL in aareplaceprofiles... In that case, it must return an error code and the code, -ENOENT represents its state that the path...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42148)

bnx2x: multiple UBSAN array-index-out-of-bounds. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504470; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42223)

media: dvb-frontends: tda10048: integer overflow state-xtalhz can be up to 16M, so it can overflow a 32 bit integer when multiplied by pllmfactor. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46817)

drm/amd/display: Stop amdgpudm initialize when stream nums greater than 6. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504454;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46707)

KVM: arm64: Make ICCSGIEL1 undef in the absence of a vGICv3 On a system with a GICv3, if a guest hasn't been configured with GICv3 and that the host is not capable of GICv2 emulation, a write to any of the ICCSGIEL1 registers is trapped to EL2. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-53237)

Bluetooth: vulnerability due to an use-after-free error in the deviceforeachchild function, where a device may be accessed after it has been freed, potentially leading to a dangling pointer and system instability. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46822)

arm64: acpi: Harden getcpuforacpiid against missing CPU entry. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504714; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46755)

wifi: mwifiex: Do not return unused priv in mwifiexgetprivbyid. mwifiexgetprivbyid returns the priv pointer corresponding to the bssnum and bsstype, but without checking if the priv is actually currently in use. Unused priv pointers do not have a wiphy attached to them which can lead to NULL...

Siemens SCALANCE and RUGGEDCOM Devices Time-of-check Time-of-use (TOCTOU) Race Condition (CVE-2024-50234)

wifi: iwlegacy: vulnerability due to stale interrupts not being cleared before resuming the iwl4965 device from hibernation, causing a race condition between the resume process and restart work. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53066)

nfs: KMSAN warning in decodegetfattrattrs. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504687; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56568)

iommu/arm-smmu: Defer probe of clients after smmu device bound Null pointer dereference occurs due to a race between smmu driver probe and client driver probe, when ofdmaconfigure for client is called after the iommudeviceregister for smmu driver probe has executed but before the driverbound for...

Siemens SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-53226)

RDMA/hns: vulnerability due to a potential NULL pointer dereference in hnsrocemapmrsg because ibmapmrsg allows upper layer protocols ULPs to specify NULL as the sgoffset argument, requiring the driver to check for NULL before dereferencing. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-39506)

liquidio: Adjust a NULL pointer handling path in liovfrepcopypacket. In liovfrepcopypacket pginfo-page is compared to a NULL value, but then it is unconditionally passed to skbaddrxfrag, which could lead to null pointer dereference. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Control of Resource Identifiers ('Resource Injection') (CVE-2024-42244)

USB: serial: mos7840: fix crash on resume SinceUSB: serial: use generic method if no alternative is provided in usb serial layer, USB serial core calls the generic resume implementation when the driver has not provided one. This can trigger a crash on resume with mos7840 since support for multipl...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41090)

tap: add missing verification for short frame. Missing to check against the validity of the frame length in the tapgetuserxdp path, which could cause a corrupted skb to be sent downstack. Even before the skb is transmitted, the tapgetuserxdp--skbsetnetworkheader may assume the size is more than...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56704)

9p/xen: A fix release of IRQ Kernel logs indicate an IRQ was double- freed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504663;...