CVE-2024-56645
mediumpriority · track · 22EPSS 0.007 · 52 %ileDEEURUUSEPSS · scored 2026-10-27
In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_session_new(): fix skb reference counting Since j1939_session_skb_queue() does an extra skb_get() for each new skb, do the same for the initial one in j1939_session_new() to avoid refcount underflow. [mkl: clean up commit message]
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedRUGGEDCOM RST2428P (6GK6242-6PA00)siemens_psirt
Update to V3.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109988839/ - FixedSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 familysiemens_psirt
See Section Additional Information.
- FixedSCALANCE XCM-/XRM-/XCH-/XRH-300 familysiemens_psirt
Update to V3.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109988839/ - FixedRUGGEDCOM RST2428P (6GK6242-6PA00)cisa_csaf_ot
Update to V3.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109988839/ - FixedSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 familycisa_csaf_ot
See Section Additional Information.
- FixedSCALANCE XCM-/XRM-/XCH-/XRH-300 familycisa_csaf_ot
Update to V3.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109988839/
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 5.1–9.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (75)
Products and version ranges known to be affected.
advisories (4)
Vendor and ecosystem advisories describing this.
- SSA-355557SSA-355557: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.22025-08-12csaf · siemens_psirtDE
SINEC OS before V3.2 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
- WID-SEC-W-2024-3762Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2024-12-29csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen und um nicht näher beschriebene Effekte zu erzielen.
- WID-SEC-W-2026-2253IBM Security Verify Access: Mehrere SchwachstellenDeutsch2026-07-08csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, sensible Informationen offenzulegen und andere, nicht näher bezeichnete Angriffe durchzuführen.
- ICSA-25-226-07Siemens Third-Party Components in SINEC OS2025-08-12icsa · cisa_csaf_otUS
SINEC OS before V3.2 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (23)
External citations — patches, advisories, analysis.
- https://git.kernel.org/stable/c/224e606a8d8e8c7db94036272c47a37455667313cnnvd
- https://git.kernel.org/stable/c/4199dd78a59896e091d3a7a05a77451aa7fd724dcnnvd
- https://git.kernel.org/stable/c/426d94815e12b6bdb9a75af294fbbafb9301601dcnnvd
- https://git.kernel.org/stable/c/68fceb143b635cdc59fed3896d5910aff38f345ecnnvd
- https://git.kernel.org/stable/c/a8c695005bfe6569acd73d777ca298ddddd66105cnnvd
- https://git.kernel.org/stable/c/b3282c2bebeeb82ceec492ee4972f51ee7a4a132cnnvd
- https://git.kernel.org/stable/c/f117cba69cbbd496babb3defcdf440df4fd6fe14cnnvd
- https://git.kernel.org/stable/c/224e606a8d8e8c7db94036272c47a37455667313enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan