Siemens SIMATIC Devices Race Condition (CVE-2024-24858)

A race condition was found in the Linux kernel's net/bluetooth in conn,advmin,maxintervalset function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to denial of service. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC Devices Improper Input Validation (CVE-2025-21719)

ipmr: do not call mrmfcusesdev for unres entries This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503487; scriptversion"1.2";...

Siemens SIMATIC Devices Improper Check for Unusual or Exceptional Conditions (CVE-2024-25739)

createemptylvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi-lebsize. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEV...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-34027)

f2fs: compress: filesystem metadata including blkaddr in dnode, inode fields and .totalvalidblockcount may be corrupted after SPO case. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-27053)

Vulnerability in the Linux kernel: wifi: wilc1000: RCU usage in connect path This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503627;...

Siemens SIMATIC Devices Use After Free (CVE-2025-21753)

btrfs: fix use-after-free when attempting to join an aborted transaction This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503682; scriptversion"1.2...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Validation of Array Index (CVE-2024-49894)

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma hardware format translation Fixes index out of bounds issue in cmhelpertranslatecurvetodegammahwformat function. The issue could occur when the index 'i' exceeds the number of...

Siemens SIMATIC Devices Use of Uninitialized Resource (CVE-2024-35893)

In the Linux kernel, the following vulnerability has been resolved: net/sched: actskbmod: prevent kernel-infoleak syzbot found that tcfskbmoddump was copying four bytes from kernel stack to user space. The issue here is that 'struct tcskbmod' has a four bytes hole. We need to clear the structure...

Siemens SIMATIC Devices Use After Free (CVE-2025-21760)

ndisc: extend RCU protection in ndiscsendskb This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503636; scriptversion"1.3";...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-58009)

Bluetooth: L2CAP: handle NULL sock pointer in l2capsockalloc This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503503; scriptversion"1.2";...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38578)

ecryptfs: Fix buffer size for tag 66 packet The 'TAG 66 Packet Format' description is missing the cipher code and checksum fields that are packed into the message packet. As a result, the buffer allocated for the packet is 3 bytes too small and writetag66packet will write up to 3 bytes past the e...

Siemens SIMATIC Devices Race Condition (CVE-2024-26810)

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if descripti...

Siemens SIMATIC Devices Use of Uninitialized Resource (CVE-2024-46865)

In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC Devices Classic Buffer Overflow (CVE-2024-50131)

In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character when validating the event length strlen returns a string length excluding the null byte. If the string length equals to the maximum buffer length, the buffer will have no space for the NULL...

Siemens SIMATIC Devices Buffer Overflow (CVE-2024-35935)

btrfs: send: handle path ref underflow in header iterateinoderef This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503528; scriptversion"1.2";...

Siemens SIMATIC Devices Use After Free (CVE-2023-47233)

The brcm80211 component in the Linux kernel through 6.5.10 has a brcmfcfg80211detach use-after-free in the device unplugging disconnect the USB by hotplug code. For physically proximate attackers with local access, this could be exploited in a real world scenario. This is related to...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-42312)

In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize iuid/igid Always initialize iuid/igid inside the sysfs core so setownership can safely skip setting them. Commit 5ec27ec735ba fs/proc/procsysctl.c: fix the default values of iuid/igid on /proc/sys inodes...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-27024)

Vulnerability in the Linux kernel: net/rds: WARNING in rdsconnconnectifdown If connection isn't established yet, getmr will fail, trigger connection after getmr. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Siemens SIMATIC Devices Missing Release of Memory after Effective Lifetime (CVE-2025-21683)

bpf: Fix bpfskselectreuseport memory leak This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503626; scriptversion"1.2";...

Siemens SIMATIC Devices Improper Resource Shutdown or Release (CVE-2024-36004)

i40e: Do not use WQMEMRECLAIM flag for workqueue This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503470; scriptversion"1.2";...