Google: sys-kernel/csql-kernel-6_1, sys-kernel/lakitu-kernel-6_1: security update to 18244.236.5

high Tenable Cloud Security Plugin ID 451676

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: prefer
nft_chain_validate nft_chain_validate already performs loop detection because a cycle will result in a
call stack overflow (ctx->level >= NFT_JUMP_STACK_SIZE). It also follows maps via ->validate callback in
nft_lookup, so there appears no reason to iterate the maps again. nf_tables_check_loops() and all its
helper functions can be removed. This improves ruleset load time significantly, from 23s down to 12s. This
also fixes a crash bug. Old loop detection code can result in unbounded recursion: BUG: TASK stack guard
page was hit at .... Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN CPU: 4 PID: 1539 Comm: nft Not
tainted 6.10.0-rc5+ #1 [..] with a suitable ruleset during validation of register stores. I can't see any
actual reason to attempt to check for this from nft_validate_register_store(), at this point the
transaction is still in progress, so we don't have a full picture of the rule graph. For nf-next it might
make sense to either remove it or make this depend on table->validate_state in case we could catch an
error earlier (for improved error reporting to userspace). (CVE-2024-41042)

Solution

Update the sys-kernel/csql-kernel-6_1 library and its related packages to version 18244.236.5 or later.

Plugin Details

Severity: High

ID: 451676

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/1/2026

Updated: 10/1/2026

Risk Information

VPR

Risk Factor: High

Score: 7.6

Percentile: 98.25

Vendor

Vendor Severity: HIGH

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2024-41042

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 7/29/2024

Reference Information

CVE: CVE-2024-41042

Detections

Analytics