Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49981)

media: venus: A race condition may trigger a use after free vulnerability in venusremove. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504710;...

Siemens SCALANCE and RUGGEDCOM Devices Divide By Zero (CVE-2024-56567)

ad7780: division by zero in ad7780writeraw In the ad7780writeraw , val2 can be zero, which might lead to a division by zero error in DIVROUNDCLOSEST. The ad7780writeraw is based on iioinfo's writeraw. While val is explicitly declared that can be zero in read mode, val2 is not specified to be...

Siemens SCALANCE and RUGGEDCOM Devices Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (CVE-2024-42232)

libceph: fix race between delayedwork and cephmoncstop The way the delayed work is handled in cephmoncstop is prone to races with monfault and possibly also finishhunting. Both of these can requeue the delayed work which wouldn't be canceled by any of the following code in case that happens after...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46758)

hwmon: lm95234 underflows seen when writing limit attributes DIVROUNDCLOSEST after kstrtol results in an underflow if a large negative number such as -9223372036854775808 is provided by the user. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49966)

ocfs2: cancel dqisyncwork before freeing oinfo ocfs2globalreadinfo will initialize and schedule dqisyncwork at the end. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; i...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56593)

wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmfsdiodsglistrw. This patch fixes a NULL pointer dereference bug in brcmfmac that occurs when a high 'sdsgentryalign' value applies e.g. 512 and a lot of queued SKBs are sent from the pkt queue. This plugin only works with Tenable.ot...

Siemens SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-50198)

iio: light: veml6030: fix IIO device retrieval from embedded device. The dev pointer that is received as an argument in the inilluminanceperiodavailableshow function references the device embedded in the IIO device, not in the i2c client. devtoiiodev must be used to accessthe right data. The...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46740)

binder: UAF caused by offsets overwrite. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504456; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41081)

ila: block BH in ilaoutput. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504571; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-50269)

usb: musb: sunxi: accessing an released usb phy will cause that usb phy @glue-xceiv is accessed after released. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41097)

usb: atm: cxacru: incomplete endpoint checking in cxacrubind. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504539; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50199)

mm/swapfile: skip HugeTLB pages for unusevma I got a bad pud error and lost a 1GB HugeTLB when calling swapoff. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Siemens SCALANCE and RUGGEDCOM Devices Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') (CVE-2024-40902)

jfs: xattr: buffer overflow for invalid xattr. When an xattr size is not what is expected, it is printed out to the kernel log in hex format as a form of debugging. But when that xattr size is bigger than the expected size, printing it out can cause an access off the end of the buffer. This plugi...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41078)

btrfs: qgroup: quota root leak after quota disable failure. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504699; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40947)

ima: Avoid blocking in RCU read-side critical section, a panic happens in imamatchpolicy. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504587;...

Siemens SCALANCE and RUGGEDCOM Devices Missing Release of Memory after Effective Lifetime (CVE-2024-44971)

net: dsa: bcmsf2: vulnerability caused a memory leak by not decrementing the reference count after finding and removing PHY devices, which has been fixed by adding a call to phydevicefree to balance the reference count. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53172)

ubi: fastmap: The duplicate slab cache names can be detected and a kernel WARNING is thrown out. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Siemens SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-46674)

usb: dwc3: st: fix probed platform device ref count on probe error path. The probe function never performs any paltform device allocation, thus error path undoplatformdevalloc is entirely bogus. It drops the reference count from the platform device being probed. If error path is triggered, this...

Siemens SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-46677)

gtp: fix NULL pointer dereference. When sockfdlookup fails, gtpencapenablesocket returns a NULL pointer, but its callers only check for error pointers thus miss the NULL pointer case. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56630)

ocfs2: iput is not called when newinode succeeded and dquotinitialize failed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504545;...