Siemens SIMATIC Devices Classic Buffer Overflow (CVE-2024-26988)

In the Linux kernel, the following vulnerability has been resolved: init/main.c: Fix potential staticcommandline memory overflow This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SIMATIC Devices Integer Overflow or Wraparound (CVE-2024-58017)

printk: Fix signed integer overflow when defining LOGBUFLENMAX This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503397; scriptversion"1.2";...

Siemens SIMATIC Devices Out-of-bounds Write (CVE-2021-4090)

An out-of-bounds OOB memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmvalbmlen-1 in nfsd4decodebitmap4 in fs/nfsd/nfs4xdr.c. In this flaw, a local attacker with user privilege may gain access to out-of-bounds memory, leading to a system...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38589)

netrom: fix possible dead-lock in nrrtioctl syzbot loves netrom, and found a possible deadlock in nrrtioctl 1 Make sure we always acquire nrnodelistlock before nrnodelocknrnode. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-49944)

sctp: set skstate back to CLOSED if autobind fails in sctplistenstart. In sctplistenstart invoked by sctpinetlisten, it should set the skstate back to CLOSED if sctpautobind fails due to whatever reason. Otherwise, next time when calling sctpinetlisten, if sctpsksk-reuse is already set via...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-50142)

In the Linux kernel, the following vulnerability has been resolved: xfrm: validate new SA's prefixlen using SA family when sel.family is unset This expands the validation introduced in commit 07bf7908950a xfrm:Validate address prefix lengths in the xfrm selector. syzbot created an SA with...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Use of Uninitialized Resource (CVE-2024-50302)

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-26875)

media: pvrusb2: fix uaf in pvr2contextsetnotify. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503541; scriptversion"1.2";...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-35845)

wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwlfwinidebuginfotlv is used as a string, so we must ensure the string is terminated correctly before using it. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-27047)

Vulnerablity in Linux kernel: net: phy: phygetinternaldelay accessing an empty array The phygetinternaldelay function could try to access to an empty array in the case that the driver is calling phygetinternaldelay without defining delayvalues and rx-internal- delay-ps or tx-internal-delay-ps is...

Siemens SIMATIC Devices Improper Locking (CVE-2024-35805)

In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dmexceptiontableexit There was reported lockup when we exit a snapshot with many exceptions. Fix this by adding condresched to the loop that frees the exceptions. This plugin only works with Tenable.ot...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-35828)

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: some memleaks in lbsallocatecmdbuffer In the for statement of lbsallocatecmdbuffer, if the allocation of cmdarrayi.cmdbuf fails, both cmdarray and cmdarrayi.cmdbuf needs to be freed. Otherwise, there will be...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Expired Pointer Dereference (CVE-2024-47709)

can: bcm: A warning is triggered when connect is issued again for a socket whose connected device has been unregistered. However, if the socket is just closed without the 2nd connect, the remaining bo-bcmprocread triggers unnecessary removeprocentry in bcmrelease. This plugin only works with...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2021-47002)

SUNRPC: null pointer dereference in svcrqstfree. When allocpagesnode returns null in svcrqstalloc, the null rqscratchpage pointer will be dereferenced when calling putpage in svcrqstfree. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SIMATIC Devices Improper Input Validation (CVE-2025-21719)

ipmr: do not call mrmfcusesdev for unres entries This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503487; scriptversion"1.2";...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2022-38096)

A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfxexecbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of...

Siemens SIMATIC Devices Incorrect Calculation of Buffer Size (CVE-2024-35988)

riscv: Fix TASKSIZE on 64-bit NOMMU. On NOMMU, userspace memory can come from anywhere in physical RAM. The current definition of TASKSIZE is wrong if any RAM exists above 4G, causing spurious failures in the userspace access routines. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-26642)

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: disallow anonymous set with timeout flag This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-57902)

In the Linux kernel, the following vulnerability has been resolved: afpacket: fix vlangettci vs MSGPEEK Blamed commit forgot MSGPEEK case, allowing a crash 1 as found by syzbot. Rework vlangettci to not touch skb at all, so that it can be used from many cpus on the same skb. This plugin only work...

Siemens SIMATIC Devices Improper Input Validation (CVE-2025-21772)

partitions: mac: fix handling of bogus partition table This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503479; scriptversion"1.2";...