SX
Product
SCALANCE XCM-/XRM-/XCH-/XRH-300 family
168
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 55Medium 108Low 0
Watch
Add SCALANCE XCM-/XRM-/XCH-/XRH-300 family to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-39487 | 7.1 | Jul 9 | bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() Affected: before V3.1 |
| CVE-2024-38659 | 7.1 | Jun 21 | enic: Validate length of nl attributes in enic_set_vf_port Affected: before V3.1 |
| CVE-2024-38381 | 7.1 | Jun 21 | nfc: nci: Fix uninit-value in nci_rx_work Affected: before V3.1 |
| CVE-2024-36916 | 7.1 | May 30 | blk-iocost: avoid out of bounds shift Affected: before V3.1 |
| CVE-2024-35976 | 7.1 | May 20 | xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING Affected: before V3.1 |
| CVE-2024-47747 | 7.0 | Oct 21 | net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition Affected: before V3.2 |
| CVE-2024-43882 | 7.0 | Aug 21 | exec: Fix ToCToU between perm check and set-uid/gid usage Affected: before V3.1 |
| CVE-2024-39503 | 7.0 | Jul 12 | netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Affected: before V3.1 |
| CVE-2024-38612 | 7.0 | Jun 19 | ipv6: sr: fix invalid unregister error path Affected: before V3.1 |
| CVE-2024-27020 | 7.0 | May 1 | netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() Affected: before V3.1 |
| CVE-2024-7264 | 6.5 | Jul 31 | ASN.1 date parser overread Affected: before V3.2 |
| CVE-2024-50251 | 6.2 | Nov 9 | netfilter: nft_payload: sanitize offset and length before calling skb_checksum() Affected: before V3.2 |
| CVE-2024-50602 | 5.9 | Oct 27 | An issue was discovered in libexpat before 2.6.4 Affected: before V3.2 |
| CVE-2024-2511 | 5.9 | Apr 8 | Unbounded memory growth with session handling in TLSv1.3 Affected: before V3.1 |
| CVE-2025-21694 | 5.5 | Feb 12 | fs/proc: fix softlockup in __read_vmcore (part 2) Affected: before V3.2 |
| CVE-2024-48881 | 5.5 | Jan 11 | bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again Affected: before V3.2 |
| CVE-2024-56780 | 5.5 | Jan 8 | quota: flush quota_release_work upon quota writeback Affected: before V3.2 |
| CVE-2024-56770 | 5.5 | Jan 8 | net/sched: netem: account for backlog updates from child qdisc Affected: before V3.2 |
| CVE-2024-56644 | 5.5 | Dec 27 | net/ipv6: release expired exception dst cached in socket Affected: before V3.2 |
| CVE-2024-56569 | 5.5 | Dec 27 | ftrace: Fix regression with module command in stack_trace_filter Affected: before V3.2 |
| CVE-2024-53101 | 5.5 | Nov 25 | fs: Fix uninitialized value issue in from_kuid and from_kgid Affected: before V3.2 |
| CVE-2024-50299 | 5.5 | Nov 19 | sctp: properly validate chunk size in sctp_sf_ootb() Affected: before V3.2 |
| CVE-2024-50188 | 5.5 | Nov 8 | net: phy: dp83869: fix memory corruption when enabling fiber Affected: before V3.2 |
| CVE-2024-50095 | 5.5 | Nov 5 | RDMA/mad: Improve handling of timed out WRs of mad agent Affected: before V3.2 |
| CVE-2024-50046 | 5.5 | Oct 21 | NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() Affected: before V3.2 |
| CVE-2024-50045 | 5.5 | Oct 21 | netfilter: br_netfilter: fix panic with metadata_dst skb Affected: before V3.2 |
| CVE-2024-50040 | 5.5 | Oct 21 | igb: Do not bring the device up after non-fatal error Affected: before V3.2 |
| CVE-2024-50039 | 5.5 | Oct 21 | net/sched: accept TCA_STAB only for root qdisc Affected: before V3.2 |
| CVE-2024-50015 | 5.5 | Oct 21 | ext4: dax: fix overflowing extents beyond inode size when partially writing Affected: before V3.2 |
| CVE-2024-50001 | 5.5 | Oct 21 | net/mlx5: Fix error path in multi-packet WQE transmit Affected: before V3.2 |
| CVE-2024-49977 | 5.5 | Oct 21 | net: stmmac: Fix zero-division error when disabling tc cbs Affected: before V3.2 |
| CVE-2024-49955 | 5.5 | Oct 21 | ACPI: battery: Fix possible crash when unregistering a battery hook Affected: before V3.2 |
| CVE-2024-49952 | 5.5 | Oct 21 | netfilter: nf_tables: prevent nf_skb_duplicated corruption Affected: before V3.2 |
| CVE-2024-49949 | 5.5 | Oct 21 | net: avoid potential underflow in qdisc_pkt_len_init() with UFO Affected: before V3.2 |
| CVE-2024-49948 | 5.5 | Oct 21 | net: add more sanity checks to qdisc_pkt_len_init() Affected: before V3.2 |
| CVE-2024-49944 | 5.5 | Oct 21 | sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start Affected: before V3.2 |
| CVE-2024-49881 | 5.5 | Oct 21 | ext4: update orig_path in ext4_find_extent() Affected: before V3.2 |
| CVE-2024-49851 | 5.5 | Oct 21 | tpm: Clean up TPM space after command failure Affected: before V3.2 |
| CVE-2024-47735 | 5.5 | Oct 21 | RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled Affected: before V3.2 |
| CVE-2024-47710 | 5.5 | Oct 21 | sock_map: Add a cond_resched() in sock_hash_free() Affected: before V3.2 |
| CVE-2024-47709 | 5.5 | Oct 21 | can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). Affected: before V3.2 |
| CVE-2024-47706 | 5.5 | Oct 21 | block, bfq: fix possible UAF for bfqq->bic with merge chain Affected: before V3.2 |
| CVE-2024-47705 | 5.5 | Oct 21 | block: fix potential invalid pointer dereference in blk_add_partition Affected: before V3.2 |
| CVE-2024-47684 | 5.5 | Oct 21 | tcp: check skb is non-NULL in tcp_rto_delta_us() Affected: before V3.2 |
| CVE-2024-46783 | 5.5 | Sep 18 | tcp_bpf: fix return value of tcp_bpf_sendmsg() Affected: before V3.2 |
| CVE-2024-46750 | 5.5 | Sep 18 | PCI: Add missing bridge lock to pci_bus_lock() Affected: before V3.2 |
| CVE-2024-46745 | 5.5 | Sep 18 | Input: uinput - reject requests with unreasonable number of slots Affected: before V3.2 |
| CVE-2024-44990 | 5.5 | Sep 4 | bonding: fix null pointer deref in bond_ipsec_offload_ok Affected: before V3.1; before V3.2 |
| CVE-2024-44989 | 5.5 | Sep 4 | bonding: fix xfrm real_dev null pointer dereference Affected: before V3.1; before V3.2 |
| CVE-2024-44960 | 5.5 | Sep 4 | usb: gadget: core: Check for unset descriptor Affected: before V3.1 |