Scalance Xcm-xrm-xch-xrh-300 Family (Siemens) - vulnerabilities (CVEs)

187 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-03-14. Vendor: Siemens.

CVEs of Scalance Xcm-xrm-xch-xrh-300 Family

CVE-2024-8176 - CVSS 7.5 (high), 2025-03-14: A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML…
CVE-2025-21694 - CVSS 5.5 (medium), 2025-02-12: In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix softlockup in __read_vmcore (part 2) Since commit 5cbcb62dddf5 ("fs/proc: fix…
CVE-2024-57951 - CVSS 7.8 (high), 2025-02-12: In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario where a CPU…
CVE-2025-21692 - CVSS 7.8 (high), 2025-02-10: In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan <g1042620637@gmail.com> found that…
CVE-2024-52332 - CVSS 7.1 (high), 2025-01-11: In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igb_init_module() The pci_register_driver()…
CVE-2024-48881 - CVSS 5.5 (medium), 2025-01-11: In the Linux kernel, the following vulnerability has been resolved: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again Commit 028ddcac477b ("bcache:…
CVE-2024-56780 - CVSS 5.5 (medium), 2025-01-08: In the Linux kernel, the following vulnerability has been resolved: quota: flush quota_release_work upon quota writeback One of the paths quota writeback is…
CVE-2024-56770 - CVSS 5.5 (medium), 2025-01-08: In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: account for backlog updates from child qdisc In general, 'qlen' of any…
CVE-2024-56644 - CVSS 7.5 (high), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: net/ipv6: release expired exception dst cached in socket Dst objects get leaked in…
CVE-2024-56650 - CVSS 7.1 (high), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix LED ID check in led_tg_check() Syzbot has reported the following…
CVE-2024-56606 - CVSS 7.8 (high), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: af_packet: avoid erroring out after sock_init_data() in packet_create() After…
CVE-2024-56600 - CVSS 7.8 (high), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: net: inet6: do not leave a dangling sk pointer in inet6_create() sock_init_data() attaches…
CVE-2024-56601 - CVSS 7.8 (high), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inet_create() sock_init_data() attaches…
CVE-2024-56570 - CVSS 7.8 (high), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the…
CVE-2024-56569 - CVSS 5.5 (medium), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix regression with module command in stack_trace_filter When executing the…
CVE-2024-53165 - CVSS 7.8 (high), 2024-12-27: In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for…
CVE-2024-53101 - CVSS 5.5 (medium), 2024-11-25: In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses…
CVE-2024-53057 - CVSS 7.8 (high), 2024-11-19: In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT In qdisc_tree_reduce_backlog,…
CVE-2024-50301 - CVSS 7.8 (high), 2024-11-19: In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission KASAN reports an out of…
CVE-2024-50299 - CVSS 8.2 (high), 2024-11-19: In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctp_sf_ootb() A size validation fix similar to that…
CVE-2024-50262 - CVSS 7.8 (high), 2024-11-09: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds write in trie_get_next_key() trie_get_next_key() allocates a node…
CVE-2024-50251 - CVSS 6.2 (medium), 2024-11-09: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() If access…
CVE-2024-50188 - CVSS 7.8 (high), 2024-11-08: In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabling fiber When configuring the fiber…
CVE-2024-50095 - CVSS 7.5 (high), 2024-11-05: In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Improve handling of timed out WRs of mad agent Current timeout handler of mad…
CVE-2024-50602 - CVSS 5.9 (medium), 2024-10-27: An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted…
CVE-2024-50046 - CVSS 9.8 (critical), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() On the node of an NFS…
CVE-2024-50045 - CVSS 7.5 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: fix panic with metadata_dst skb Fix a kernel panic in the…
CVE-2024-50040 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: igb: Do not bring the device up after non-fatal error Commit 004d25060c78 ("igb: Fix…
CVE-2024-50039 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: net/sched: accept TCA_STAB only for root qdisc Most qdiscs maintain their backlog using…
CVE-2024-50035 - CVSS 7.1 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ppp: fix ppp_async_encode() illegal access syzbot reported an issue in ppp_async_encode()…
CVE-2024-50033 - CVSS 9.8 (critical), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: slip: make slhc_remember() more robust against malicious packets syzbot found that…
CVE-2024-50015 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ext4: dax: fix overflowing extents beyond inode size when partially writing The…
CVE-2024-50006 - CVSS 4.7 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ext4: fix i_data_sem unlock order in ext4_ind_migrate() Fuzzing reports a possible…
CVE-2024-50001 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erroneous unmap in case…
CVE-2024-49997 - CVSS 7.5 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix memory disclosure When applying padding, the buffer is not…
CVE-2024-49982 - CVSS 8.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270,…
CVE-2024-49977 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix zero-division error when disabling tc cbs The commit b8c43360f6e4 ("net:…
CVE-2024-49955 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ACPI: battery: Fix possible crash when unregistering a battery hook When a battery hook…
CVE-2024-49952 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: prevent nf_skb_duplicated corruption syzbot found that nf_dup_ipv4()…
CVE-2024-49949 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: net: avoid potential underflow in qdisc_pkt_len_init() with UFO After commit 7c6d2ecbda83…
CVE-2024-49948 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to qdisc_pkt_len_init() One path takes care of SKB_GSO_DODGY,…
CVE-2024-49944 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start In…
CVE-2024-49889 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid use-after-free in ext4_ext_show_leaf() In ext4_find_extent(), path may be…
CVE-2024-49884 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_at() We hit the following…
CVE-2024-49881 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ext4: update orig_path in ext4_find_extent() In ext4_find_extent(), if the path is not big…
CVE-2024-49851 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: tpm: Clean up TPM space after command failure tpm_dev_transmit prepares the TPM space…
CVE-2024-47747 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition In the…
CVE-2024-47735 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled Fix missuse of…
CVE-2024-47706 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible UAF for bfqq->bic with merge chain 1) initial state, three tasks:…
CVE-2024-47705 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blk_add_partition The…
CVE-2024-47710 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: sock_map: Add a cond_resched() in sock_hash_free() Several syzbot soft lockup reports all…
CVE-2024-47709 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). syzbot reported a warning in…
CVE-2024-47696 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency In the commit…
CVE-2024-47701 - CVSS 7.8 (high), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem When looking up…
CVE-2024-47685 - CVSS 9.1 (critical), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() syzbot reported that…
CVE-2024-47684 - CVSS 5.5 (medium), 2024-10-21: In the Linux kernel, the following vulnerability has been resolved: tcp: check skb is non-NULL in tcp_rto_delta_us() We have some machines running stock…
CVE-2024-47660 - CVSS 4.7 (medium), 2024-10-09: In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENT_WATCHED flags lazily In some setups directories can have many…
CVE-2024-46783 - CVSS 5.5 (medium), 2024-09-18: In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: fix return value of tcp_bpf_sendmsg() When we cork messages in psock->cork, the…
CVE-2024-46759 - CVSS 7.8 (high), 2024-09-18: In the Linux kernel, the following vulnerability has been resolved: hwmon: (adc128d818) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST()…
CVE-2024-46745 - CVSS 5.5 (medium), 2024-09-18: In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput…
CVE-2024-46744 - CVSS 7.8 (high), 2024-09-18: In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports a "KMSAN: uninit-value in…
CVE-2024-46743 - CVSS 7.3 (high), 2024-09-18: In the Linux kernel, the following vulnerability has been resolved: of/irq: Prevent device address out-of-bounds read in interrupt map walk When…
CVE-2024-46750 - CVSS 7.8 (high), 2024-09-18: In the Linux kernel, the following vulnerability has been resolved: PCI: Add missing bridge lock to pci_bus_lock() One of the true positives that the…
CVE-2024-46679 - CVSS 4.7 (medium), 2024-09-13: In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a…
CVE-2024-44990 - CVSS 5.5 (medium), 2024-09-04: In the Linux kernel, the following vulnerability has been resolved: bonding: fix null pointer deref in bond_ipsec_offload_ok We must check if there is an…
CVE-2024-44989 - CVSS 5.5 (medium), 2024-09-04: In the Linux kernel, the following vulnerability has been resolved: bonding: fix xfrm real_dev null pointer dereference We shouldn't set real_dev to NULL…
CVE-2024-44987 - CVSS 7.8 (high), 2024-09-04: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent UAF in ip6_send_skb() syzbot reported an UAF in ip6_send_skb() [1] After…
CVE-2024-44960 - CVSS 5.5 (medium), 2024-09-04: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set before…
CVE-2024-6119 - CVSS 7.5 (high), 2024-09-03: Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address…
CVE-2024-44944 - CVSS 5.5 (medium), 2024-08-30: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path…
CVE-2024-45492 - CVSS 9.8 (critical), 2024-08-30: An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where…
CVE-2024-45491 - CVSS 9.8 (critical), 2024-08-30: An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX…
CVE-2024-45490 - CVSS 9.8 (critical), 2024-08-30: An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.
CVE-2024-44935 - CVSS 5.5 (medium), 2024-08-26: In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseport_add_sock(). syzbot reported a null-ptr-deref while…
CVE-2024-43893 - CVSS 5.5 (medium), 2024-08-26: In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid divide by zero Calling ioctl TIOCSSERIAL…
CVE-2024-43890 - CVSS 5.5 (medium), 2024-08-26: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix overflow in get_free_elt() "tracing_map->next_elt" in get_free_elt() is at…
CVE-2024-43889 - CVSS 5.5 (medium), 2024-08-26: In the Linux kernel, the following vulnerability has been resolved: padata: Fix possible divide-by-0 panic in padata_mt_helper() We are hit with a not easily…
CVE-2024-43882 - CVSS 8.4 (high), 2024-08-21: In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via…
CVE-2024-43871 - CVSS 5.5 (medium), 2024-08-21: In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API devm_free_percpu() It will cause memory…
CVE-2024-7264 - CVSS 6.5 (medium), 2024-07-31: libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the…
CVE-2024-42154 - CVSS 4.4 (medium), 2024-07-30: In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: validate source addr length I don't see anything checking that…
CVE-2024-42131 - CVSS 4.4 (medium), 2024-07-30: In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic The dirty throttling logic is interspersed…
CVE-2024-42106 - CVSS 5.5 (medium), 2024-07-30: In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag_req_v2 KMSAN reported uninit-value…
CVE-2024-42094 - CVSS 7.1 (high), 2024-07-29: In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y…
CVE-2024-42093 - CVSS 7.3 (high), 2024-07-29: In the Linux kernel, the following vulnerability has been resolved: net/dpaa2: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y…
CVE-2024-42082 - CVSS 5.5 (medium), 2024-07-29: In the Linux kernel, the following vulnerability has been resolved: xdp: Remove WARN() from __xdp_reg_mem_model() syzkaller reports a warning in…
CVE-2024-42070 - CVSS 5.5 (medium), 2024-07-29: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers register…
CVE-2024-41046 - CVSS 8.8 (high), 2024-07-29: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in detach The number of the currently released…
CVE-2024-41005 - CVSS 4.7 (medium), 2024-07-12: In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix race condition in netpoll_owner_active KCSAN detected a race condition in…
CVE-2024-41004 - CVSS 5.5 (medium), 2024-07-12: In the Linux kernel, the following vulnerability has been resolved: tracing: Build event generation tests only as modules The kprobes and synth event…
CVE-2024-41006 - CVSS 5.5 (medium), 2024-07-12: In the Linux kernel, the following vulnerability has been resolved: netrom: Fix a memory leak in nr_heartbeat_expiry() syzbot reported a memory leak in…
CVE-2024-40995 - CVSS 5.5 (medium), 2024-07-12: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() syzbot found…
CVE-2024-41000 - CVSS 7.8 (high), 2024-07-12: In the Linux kernel, the following vulnerability has been resolved: block/ioctl: prefer different overflow check Running syzkaller with the newly reintroduced…
CVE-2024-40984 - CVSS 7.8 (high), 2024-07-12: In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." Undo the…
CVE-2024-40980 - CVSS 7.5 (high), 2024-07-12: In the Linux kernel, the following vulnerability has been resolved: drop_monitor: replace spin_lock by raw_spin_lock trace_drop_common() is called with…
CVE-2024-40961 - CVSS 5.5 (medium), 2024-07-12: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL deref in fib6_nh_init() syzbot reminds us that in6_dev_get()…
CVE-2024-40960 - CVSS 5.5 (medium), 2024-07-12: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL dereference in rt6_probe() syzbot caught a NULL dereference in…
CVE-2024-40958 - CVSS 7.8 (high), 2024-07-12: In the Linux kernel, the following vulnerability has been resolved: netns: Make get_net_ns() handle zero refcount net Syzkaller hit a warning: refcount_t:…
CVE-2024-40959 - CVSS 5.5 (medium), 2024-07-12: In the Linux kernel, the following vulnerability has been resolved: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() ip6_dst_idev() can return…
CVE-2024-40945 - CVSS 5.5 (medium), 2024-07-12: In the Linux kernel, the following vulnerability has been resolved: iommu: Return right value in iommu_sva_bind_device() iommu_sva_bind_device() should return…