Google: sys-kernel/csql-kernel-6_1: security update to 18244.448.39

medium Tenable Cloud Security Plugin ID 450918

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix crash in
icl_update_topdown_event() The perf_fuzzer found a hard-lockup crash on a RaptorLake machine: Oops:
general protection fault, maybe for address 0xffff89aeceab400: 0000 CPU: 23 UID: 0 PID: 0 Comm: swapper/23
Tainted: [W]=WARN Hardware name: Dell Inc. Precision 9660/0VJ762 RIP: 0010:native_read_pmc+0x7/0x40 Code:
cc e8 8d a9 01 00 48 89 03 5b cd cc cc cc cc 0f 1f ... RSP: 000:fffb03100273de8 EFLAGS: 00010046 .... Call
Trace: <TASK> icl_update_topdown_event+0x165/0x190 ? ktime_get+0x38/0xd0 intel_pmu_read_event+0xf9/0x210
__perf_event_read+0xf9/0x210 CPUs 16-23 are E-core CPUs that don't support the perf metrics feature. The
icl_update_topdown_event() should not be invoked on these CPUs. It's a regression of commit: f9bdf1f95339
("perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read") The bug introduced by that commit
is that the is_topdown_event() function is mistakenly used to replace the is_topdown_count() call to check
if the topdown functions for the perf metrics feature should be invoked. Fix it. (CVE-2025-38322)

Solution

Update the sys-kernel/csql-kernel-6_1 library and its related packages to version 18244.448.39 or later.

Plugin Details

Severity: Medium

ID: 450918

Version: Revision 1.3

Type: Local

Family: Google COS Security Checks

Published: 10/1/2026

Updated: 10/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.4

Vendor

Vendor Severity: MEDIUM

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2025-38322

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Reference Information

CVE: CVE-2025-38322

Detections

Analytics