Google: sys-kernel/csql-kernel-6_1: security update to 18244.85.39

high Tenable Cloud Security Plugin ID 451599

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix race between
namespace cleanup and gc in the list:set type Lion Ackermann reported that there is a race condition
between namespace cleanup in ipset and the garbage collection of the list:set type. The namespace cleanup
can destroy the list:set type of sets while the gc of the set type is waiting to run in rcu cleanup. The
latter uses data from the destroyed set which thus leads use after free. The patch contains the following
parts: - When destroying all sets, first remove the garbage collectors, then wait if needed and then
destroy the sets. - Fix the badly ordered "wait then remove gc" for the destroy a single set case. - Fix
the missing rcu locking in the list:set type in the userspace test case. - Use proper RCU list handlings
in the list:set type. The patch depends on c1193d9bbbd3 (netfilter: ipset: Add list flush to cancel_gc).
(CVE-2024-39503)

Solution

Update the sys-kernel/csql-kernel-6_1 library and its related packages to version 18244.85.39 or later.

Plugin Details

Severity: High

ID: 451599

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/1/2026

Updated: 10/1/2026

Risk Information

VPR

Risk Factor: Medium

Score: 6.9

Percentile: 96.97

Vendor

Vendor Severity: HIGH

CVSS v2

Risk Factor: Medium

Base Score: 6

Temporal Score: 4.4

Vector: CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2024-39503

CVSS v3

Risk Factor: High

Base Score: 7

Temporal Score: 6.1

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 4/9/2024

Reference Information

CVE: CVE-2024-39503

Detections

Analytics