Google: sys-kernel/csql-kernel-6_1, sys-kernel/lakitu-kernel-6_1: security update to 18244.582.29

medium Tenable Cloud Security Plugin ID 451240

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: flex_proportions: make
fprop_new_period() hardirq safe Bernd has reported a lockdep splat from flexible proportions code that is
essentially complaining about the following race: <timer fires> run_timer_softirq - we are in softirq
context call_timer_fn writeout_period fprop_new_period write_seqcount_begin(&p->sequence); <hardirq is
raised> ... blk_mq_end_request() blk_update_request() ext4_end_bio() folio_end_writeback()
__wb_writeout_add() __fprop_add_percpu_max() if (unlikely(max_frac < FPROP_FRAC_BASE)) {
fprop_fraction_percpu() seq = read_seqcount_begin(&p->sequence); - sees odd sequence so loops indefinitely
Note that a deadlock like this is only possible if the bdi has configured maximum fraction of writeout
throughput which is very rare in general but frequent for example for FUSE bdis. To fix this problem we
have to make sure write section of the sequence counter is irqsafe. (CVE-2026-23168)

Solution

Update the sys-kernel/csql-kernel-6_1 library and its related packages to version 18244.582.29 or later.

Plugin Details

Severity: Medium

ID: 451240

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/1/2026

Updated: 10/1/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.72

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2026-23168

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 2/14/2026

Reference Information

CVE: CVE-2026-23168

Detections

Analytics