Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41091)

tun: add missing verification for short frame. Missing to check against the validity of the frame length in the tunxdpone path could cause a corrupted skb to be sent downstack. Even before the skb is transmitted, the tunxdpone--ethtypetrans may access the Ethernet header although it can be less...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40904)

USB: class: cdc-wdm: CPU lockup caused by excessive log messages. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504488; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49875)

nfsd: map the EBADMSG to nfserrio to avoid warning Ext4 will throw -EBADMSG through ext4readdir when a checksum error occurs. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SCALANCE and RUGGEDCOM Devices Improper Locking (CVE-2024-46791)

can: mcp251x: fix deadlock if an interrupt occurs during mcp251xopen The mcp251xhwwake function is called with the mpclock mutex held and disables the interrupt handler so that no interrupts can be processed while waking the device. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Missing Release of Memory after Effective Lifetime (CVE-2024-56572)

media: platform: allegro-dvt: possible memory leak in allocatebuffersinternal. If The buffer in the loop is not released under the exception path, it may lead to a memory leak. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-44988)

net: dsa: mv88e6xxx: vulnerability caused an out-of-bound access in the mv88e6xxx driver due to an ATU violation causing the SPID to exceed DSAMAXPORTS, which was resolved by ensuring the SPID stays within the valid range. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (CVE-2024-40943)

ocfs2: fix races between hole punching and AIO+DIO. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504517; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42148)

bnx2x: multiple UBSAN array-index-out-of-bounds. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504470; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41090)

tap: add missing verification for short frame. Missing to check against the validity of the frame length in the tapgetuserxdp path, which could cause a corrupted skb to be sent downstack. Even before the skb is transmitted, the tapgetuserxdp--skbsetnetworkheader may assume the size is more than...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53173)

NFSv4.0: When two threads are opening files at the same time, and are forced to abort before a reply is seen, then the call to nfsreleaseseqid in nfs4opendatafree can result in a use-after- free of the pointer to the defunct rpc task of the other thread. This plugin only works with Tenable.ot...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41095)

drm/nouveau/dispnv04: null pointer dereference in nv17tvgetldmodes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504742; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-43908)

drm/amdgpu: null pointer dereference in rasmanager. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504474; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Integer Overflow or Wraparound (CVE-2024-47739)

padata: missing integer wrap around can cause deadlock on seqnr overflow. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504468;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56700)

media: wl128x: Atomicity violation occurs when the fmcsendcmd function is executed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504519;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53198)

xen: issue of resource not being properly released in xenbusdevprobe. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504533; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53197)

ALSA: usb-audio: vulnerability leading to out-of-bound accesses due to a bogus device providing an excessive bNumConfigurations value, which is fixed by ensuring proper allocation in usbgetconfiguration. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46676)

nfc: pn533: Add poll mod list filling check. In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if !improtocols && !tmprotocols' in the nfcstartpoll. But then after pn533pollcreatemodlist call in pn533startpoll poll mod list will remain...

Network Mirroring in Siemens RUGGEDCOM Incorrect Provision of Specified Functionality (CVE-2023-24845)

The affected products insufficiently block data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior. This plugin onl...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46829)

rtmutex: Drop rtmutex::waitlock before scheduling. rtmutexhandledeadlock is called with rtmutex::waitlock held. In the good case it returns with the lock held and in the deadlock case it emits a warning and goes into an endless scheduling loop with the lock held, which triggers the 'scheduling in...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47740)

Inf2fs: Require FMODEWRITE for atomic write ioctls. The F2FS ioctls for starting and committing atomic writes check for inodeownerorcapable, but this does not give LSMs like SELinux or Landlock an opportunity to deny the write access - if the caller's FSUID matches the inode's UID,...