Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-44969)

s390/sclp: vulnerability could lead to data corruption if a Store Data operation is interrupted and the halt attempt fails, which was resolved by preventing the release of data buffers in such cases. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-43908)

drm/amdgpu: null pointer dereference in rasmanager. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504474; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56548)

hfsplus: Devices block sizes may change. One of these cases is a loop device by using ioctl LOOPSETBLOCKSIZE. While this may cause other issues like IO being rejected, in the case of hfsplus, it will allocate a block by using that size and potentially write out-of- bounds when hfsplusreadwrapper...

Siemens SCALANCE and RUGGEDCOM Devices Integer Overflow or Wraparound (CVE-2024-47739)

padata: missing integer wrap around can cause deadlock on seqnr overflow. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504468;...

Siemens SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-56581)

btrfs: ref-verify: use-after-free after invalid ref action. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504648; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-37078)

nilfs2: kernel vulnerability due to lack of writeback flag waiting. When the log writer starts a writeback for segment summary blocks or a super root block that use the backing devices page cache, it does not wait for the ongoing folio/page writeback, resulting in an inconsistent writeback state...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56700)

media: wl128x: Atomicity violation occurs when the fmcsendcmd function is executed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504519;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53198)

xen: issue of resource not being properly released in xenbusdevprobe. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504533; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53197)

ALSA: usb-audio: vulnerability leading to out-of-bound accesses due to a bogus device providing an excessive bNumConfigurations value, which is fixed by ensuring proper allocation in usbgetconfiguration. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46676)

nfc: pn533: Add poll mod list filling check. In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if !improtocols && !tmprotocols' in the nfcstartpoll. But then after pn533pollcreatemodlist call in pn533startpoll poll mod list will remain...

Network Mirroring in Siemens RUGGEDCOM Incorrect Provision of Specified Functionality (CVE-2023-24845)

The affected products insufficiently block data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior. This plugin onl...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46829)

rtmutex: Drop rtmutex::waitlock before scheduling. rtmutexhandledeadlock is called with rtmutex::waitlock held. In the good case it returns with the lock held and in the deadlock case it emits a warning and goes into an endless scheduling loop with the lock held, which triggers the 'scheduling in...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47740)

Inf2fs: Require FMODEWRITE for atomic write ioctls. The F2FS ioctls for starting and committing atomic writes check for inodeownerorcapable, but this does not give LSMs like SELinux or Landlock an opportunity to deny the write access - if the caller's FSUID matches the inode's UID,...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47659)

smack: tcp: vulnerability in Smack's TCP/IPv4 labeling allows packets to be incorrectly labeled, enabling unauthorized data writing from one label to another. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50049)

drm/amd/display: null pointer before dereferencing se. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504570; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41070)

KVM: PPC: Book3S HV: UAF in kvmspaprtceattachiommugroup. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504613; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46714)

drm/amd/display: Skip wbsclsetscalerfilter if filter is null Callers can pass null in filter i.e. from returned from the function wbsclgetfiltercoeffs16p and a null check is added to ensure that is not the case. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49867)

btrfs: wait for fixup workers before stopping cleaner kthread during umount During unmount, at closectree. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50051)

spi: mpc52xx: Add cancelworksync before module remove. If the module which will call mpc52xxspiremove is removed, it will free 'ms' through spiunregistercontroller. while the work ms-work will be used. The sequence of operations that may lead to a UAF bug. This plugin only works with Tenable.ot...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50179)

ceph: incorrect Fw reference check when dirtying pages. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504801; scriptversion"1.3";...