Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53097)

mm: krealloc: MTE false alarm in dokrealloc. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504721; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49969)

drm/amd/display: index out of bounds in DCN30 color transformation. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504753; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46814)

drm/amd/display: Check msgid before processing transcation. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504715; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56701)

powerpc/pseries: The dtlaccesslock needs to be a rwsempahore, a sleeping lock, because the code calls kmalloc while holding it, which can sleep. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, In...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56700)

media: wl128x: Atomicity violation occurs when the fmcsendcmd function is executed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504519;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Locking (CVE-2024-46791)

can: mcp251x: fix deadlock if an interrupt occurs during mcp251xopen The mcp251xhwwake function is called with the mpclock mutex held and disables the interrupt handler so that no interrupts can be processed while waking the device. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41087)

ata: libata-core: double free on error. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504595; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49959)

jbd2: stop waiting for space when jbd2cleanupjournaltail returns error In jbd2logwaitforspace, we might call jbd2cleanupjournaltail to recover some journal space. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Siemens SCALANCE and RUGGEDCOM Devices Missing Release of Memory after Effective Lifetime (CVE-2024-56572)

media: platform: allegro-dvt: possible memory leak in allocatebuffersinternal. If The buffer in the loop is not released under the exception path, it may lead to a memory leak. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56587)

leds: class: Protect brightnessshow with ledcdev-ledaccess mutex. There is NULL pointer vulnerability observed if from Process A where hid device being added which results in adding a ledcdev addition and later a another call to access of ledcdev attribute from Process B can result in NULL pointe...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-45021)

memcgwriteeventcontrol: a user-triggerable oops. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504527; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41064)

powerpc/eeh: possible crash when edev-pdev changes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504739; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42152)

nvmet: possible leak when destroy a ctrl during qp establishment. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504784; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Double Free (CVE-2024-46673)

scsi: aacraid: Fix double-free on probe failure. aacprobeone calls hardware-specific init functions through the aacdriverident::init pointer, all of which eventually call down to aacinitadapter. If aacinitadapter fails after allocating memory for aacdev::queues, it frees the memory but does not...

Siemens SCALANCE and RUGGEDCOM Devices Integer Overflow or Wraparound (CVE-2024-47739)

padata: missing integer wrap around can cause deadlock on seqnr overflow. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504468;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41095)

drm/nouveau/dispnv04: null pointer dereference in nv17tvgetldmodes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504742; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-37078)

nilfs2: kernel vulnerability due to lack of writeback flag waiting. When the log writer starts a writeback for segment summary blocks or a super root block that use the backing devices page cache, it does not wait for the ongoing folio/page writeback, resulting in an inconsistent writeback state...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56594)

drm/amdgpu: set the right AMDGPU sg segment limitation. The driver needs to set the correct maxsegmentsize; otherwise debugdmamapsg will complain about the over-mapping of the AMDGPU sg length. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mo...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50290)

media: cx24116: prevent overflows on SNR calculus as reported by Coverity, if reading SNR registers fail, a negative number will be returned, causing an underflow when reading SNR registers. Prevent that. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56643)

dccp: vulnerability in DCCP Datagram Congestion Control Protocol involves a memory leak in dccpfeatchangerecv where memory allocated for a new SP feature value is not freed if dccpfeatpushconfirm fails, leading to potential resource exhaustion. This plugin only works with Tenable.ot. Please visit...