Detections
Analytics

Google: sys-kernel/csql-kernel-6_6: security update to 19165.0.0

medium Tenable Cloud Security Plugin ID 452479

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: block: RCU protect
 disk->conv_zones_bitmap Ensure that a disk revalidation changing the conventional zones bitmap of a disk
 does not cause invalid memory references when using the disk_zone_is_conv() helper by RCU protecting the
 disk->conv_zones_bitmap pointer. disk_zone_is_conv() is modified to operate under the RCU read lock and
 the function disk_set_conv_zones_bitmap() is added to update a disk conv_zones_bitmap pointer using
 rcu_replace_pointer() with the disk zone_wplugs_lock spinlock held. disk_free_zone_resources() is modified
 to call disk_update_zone_resources() with a NULL bitmap pointer to free the disk conv_zones_bitmap.
 disk_set_conv_zones_bitmap() is also used in disk_update_zone_resources() to set the new (revalidated)
 bitmap and free the old one. (CVE-2024-57875)

Solution

Update the sys-kernel/csql-kernel-6_6 library and its related packages to version 19165.0.0 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-125.oval.xml.tar.gz

Plugin Details

Severity: Medium

ID: 452479

Version: Revision 1.1

Type: Local

Published: 10/1/2026

Updated: 10/1/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.38

Vendor

Vendor Severity: MEDIUM

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2024-57875

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 1/11/2025

Reference Information

CVE: CVE-2024-57875