Detections
Analytics

Google: sys-kernel/lakitu-kernel-6_1: security update to 18244.151.9

medium Tenable Cloud Security Plugin ID 450676

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty
 throttling logic The dirty throttling logic is interspersed with assumptions that dirty limits in
 PAGE_SIZE units fit into 32-bit (so that various multiplications fit into 64-bits). If limits end up being
 larger, we will hit overflows, possible divisions by 0 etc. Fix these problems by never allowing so large
 dirty limits as they have dubious practical value anyway. For dirty_bytes / dirty_background_bytes
 interfaces we can just refuse to set so large limits. For dirty_ratio / dirty_background_ratio it isn't so
 simple as the dirty limit is computed from the amount of available memory which can change due to memory
 hotplug etc. So when converting dirty limits from ratios to numbers of pages, we just don't allow the
 result to exceed UINT_MAX. This is root-only triggerable problem which occurs when the operator sets dirty
 limits to >16 TB. (CVE-2024-42131)

Solution

Update the sys-kernel/lakitu-kernel-6_1 library and its related packages to version 18244.151.9 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-113.oval.xml.tar.gz

Plugin Details

Severity: Medium

ID: 450676

Version: Revision 1.1

Type: Local

Published: 10/1/2026

Updated: 10/1/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

Vendor

Vendor Severity: MEDIUM

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.2

Vector: CVSS2#AV:L/AC:L/Au:M/C:N/I:N/A:C

CVSS Score Source: CVE-2024-42131

CVSS v3

Risk Factor: Medium

Base Score: 4.4

Temporal Score: 3.9

Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 12/12/2023

Reference Information

CVE: CVE-2024-42131