Google: sys-kernel/lakitu-kernel-6_1: security update to 18244.85.5

medium Tenable Cloud Security Plugin ID 451590

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking
tree for clk_summary Similar to the previous commit, we should make sure that all devices are runtime
resumed before printing the clk_summary through debugfs. Failure to do so would result in a deadlock if
the thread is resuming a device to print clk state and that device is also runtime resuming in another
thread, e.g the screen is turning on and the display driver is starting up. We remove the calls to
clk_pm_runtime_{get,put}() in this path because they're superfluous now that we know the devices are
runtime resumed. This also squashes a bug where the return value of clk_pm_runtime_get() wasn't checked,
leading to an RPM count underflow on error paths. (CVE-2024-27003)

Solution

Update the sys-kernel/lakitu-kernel-6_1 library and its related packages to version 18244.85.5 or later.

Plugin Details

Severity: Medium

ID: 451590

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/1/2026

Updated: 10/1/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

Vendor

Vendor Severity: MEDIUM

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2024-27003

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 4/27/2024

Reference Information

CVE: CVE-2024-27003

Detections

Analytics