Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Integer Overflow or Wraparound (CVE-2024-41000)

block/ioctl: prefer different overflow check Running syzkaller with the newly reintroduced signed integer overflow sanitizer. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SIMATIC Devices Improper Locking (CVE-2024-42114)

wifi: cfg80211: restrict NL80211ATTRTXQQUANTUM values This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503606; scriptversion"1.2";...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40978)

scsi: qedi: crash while reading debugfs attribute. The qedidbgdonotrecovercmdread function invokes sprintf directly on a user pointer, which results into the crash. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Siemens SIMATIC Devices Use After Free (CVE-2024-50121)

nfsd: problematic nfsdshrinkerwork using sync mode in nfs4stateshutdownnet. In the normal case, when we excute echo 0 /proc/fs/nfsd/threads, the function nfs4statedestroynet in nfs4stateshutdownnet will release all resources related to the hashed nfs4client. This plugin only works with Tenable.ot...

Siemens SIMATIC Devices Deadlock (CVE-2024-42090)

pinctrl: deadlock in createpinctrl when handling -EPROBEDEFER. In createpinctrl, pinctrlmapsmutex is acquired before calling addsetting. If addsetting returns -EPROBEDEFER, createpinctrl calls pinctrlfree. However, pinctrlfree attempts to acquire pinctrlmapsmutex, which is already held by...

Siemens SIMATIC Devices Use After Free (CVE-2024-50150)

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmode should keep reference to parent The altmode device release refers to its parent device, but without keeping a reference to it. When registering the altmode, get a reference to the parent and put it in the...

Siemens SIMATIC Devices Missing Release of Memory after Effective Lifetime (CVE-2024-35930)

scsi: lpfc: Fix possible memory leak in lpfcrcvpadisc This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503546; scriptversion"1.2";...

Siemens SIMATIC Devices Use of Uninitialized Resource (CVE-2024-35915)

nfc: nci: Fix uninit-value in ncidevup and ncintfpacket This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503499; scriptversion"1.2";...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-58085)

tomoyo: don't emit warning in tomoyowritecontrol This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503542; scriptversion"1.2";...

Siemens SIMATIC Devices Divide By Zero (CVE-2024-50205)

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check before the division. The...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-58014)

wifi: brcmsmac: add gain range check to wlcphyiqcalgainparamsnphy This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503443; scriptversion"1.2";...

Siemens SIMATIC Devices Use of Uninitialized Resource (CVE-2024-42283)

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Initialize all fields in dumped nexthops struct nexthopgrp contains two reserved fields that are not initialized by nlaputnhgroup, and carry garbage. This can be observed e.g. with strace edited for clarity: ip...

Siemens SIMATIC Devices Improper Locking (CVE-2025-21859)

USB: gadget: fmidi: fmidicomplete to call queuework This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503474; scriptversion"1.2";...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2023-52458)

In the Linux kernel, the following vulnerability has been resolved: block: add check that partition length needs to be aligned with block size This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SIMATIC Devices Improper Locking (CVE-2024-35990)

dma: xilinxdpdma: Fix locking This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503700; scriptversion"1.2";...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38599)

jffs2: prevent xattr node from overflowing the eraseblock Add a check to make sure that the requested xattr node size is no larger than the eraseblock minus the cleanmarker. Unlike the usual inode nodes, the xattr nodes aren't split into parts and spread across multiple eraseblocks, which means...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-26875)

media: pvrusb2: fix uaf in pvr2contextsetnotify. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503541; scriptversion"1.2";...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-40961)

ipv6: prevent possible NULL deref in fib6nhinit syzbot reminds us that in6devget can return NULL. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-47747)

net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition. In the ether3probe function, a timer is initialized with a callback function ether3ledoff, bound to &prevdev-timer. Once the timer is started, there is a risk of a race condition if the module or device is removed...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-40984)

ACPICA: Revert ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503481;...