Siemens SIMATIC Devices Improper Input Validation (CVE-2024-27076)

Vulnerability in the Linux kernel: media: imx: csc/scaler: v4l2ctrlhandler memory leak Free the memory allocated in v4l2ctrlhandlerinit on release. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Expired Pointer Dereference (CVE-2024-47709)

can: bcm: A warning is triggered when connect is issued again for a socket whose connected device has been unregistered. However, if the socket is just closed without the 2nd connect, the remaining bo-bcmprocread triggers unnecessary removeprocentry in bcmrelease. This plugin only works with...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-39503)

netfilter: ipset: race between namespace cleanup and gc in the list:set type. The namespace cleanup can destroy the list:set type of sets while the gc of the set type is waiting to run in rcu cleanup. The latter uses data from the destroyed set which thus leads use after free. This plugin only...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-26903)

Bluetooth: rfcomm: Fixed null-ptr-deref in rfcommchecksecurity. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503694; scriptversion"1.2";...

Siemens SIMATIC Devices Race Condition (CVE-2024-26810)

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if descripti...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-26897)

wifi: ath9k: delay all of ath9kwmieventtasklet until init is complete. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503519; scriptversion"1.2";...

Siemens SIMATIC Devices Use of Uninitialized Resource (CVE-2024-35849)

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix information leak in btrfsioctllogicaltoino This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc';...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-36270)

netfilter: tproxy: bail out if IP has been disabled on the device syzbot reports: general protection fault, probably for non-canonical address This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-42304)

In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc...

Siemens SIMATIC Devices Use of Uninitialized Resource (CVE-2024-35893)

In the Linux kernel, the following vulnerability has been resolved: net/sched: actskbmod: prevent kernel-infoleak syzbot found that tcfskbmoddump was copying four bytes from kernel stack to user space. The issue here is that 'struct tcskbmod' has a four bytes hole. We need to clear the structure...

Siemens SIMATIC Devices Use of Uninitialized Resource (CVE-2024-46865)

In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Validation of Array Index (CVE-2024-49894)

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma hardware format translation Fixes index out of bounds issue in cmhelpertranslatecurvetodegammahwformat function. The issue could occur when the index 'i' exceeds the number of...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Access of Uninitialized Pointer (CVE-2024-49938)

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: Use skbsetlength for resetting urb before resubmit Syzbot points out that skbtrim has a sanity check on the existing length of the skb, which can be uninitialised in some error paths. The intent here is clearly ju...

Siemens SIMATIC Devices Improper Locking (CVE-2024-26934)

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usbdeauthorizeinterface This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38615)

cpufreq: exit callback is optional The exit callback is optional and shouldn't be called without checking a valid pointer first. Also, we must clear freqtable pointer even if the exit callback isn't present. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-40960)

ipv6: prevent possible NULL dereference in rt6probe syzbot caught a NULL dereference in rt6probe 1 Bail out if in6devget returns NULL. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-57902)

In the Linux kernel, the following vulnerability has been resolved: afpacket: fix vlangettci vs MSGPEEK Blamed commit forgot MSGPEEK case, allowing a crash 1 as found by syzbot. Rework vlangettci to not touch skb at all, so that it can be used from many cpus on the same skb. This plugin only work...

Siemens SIMATIC Devices Improper Input Validation (CVE-2025-21653)

netsched: clsflow: validate TCAFLOWRSHIFT attribute This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503380; scriptversion"1.2";...

Siemens SIMATIC Devices Out-of-bounds Read (CVE-2024-26982)

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SIMATIC Devices Improper Input Validation (CVE-2025-21762)

In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arpxmit arpxmit can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...