Google: sys-kernel/csql-kernel-6_1, sys-kernel/lakitu-kernel-5_15: security update to 17800.519.1

medium Tenable Cloud Security Plugin ID 454039

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: net: let net.core.dev_weight always be
non-zero The following problem was encountered during stability test: (NULL net_device): NAPI poll
function process_backlog+0x0/0x530 \ returned 1, exceeding its budget of 0. ------------[ cut here
]------------ list_add double add: new=ffff88905f746f48, prev=ffff88905f746f48, \ next=ffff88905f746e40.
WARNING: CPU: 18 PID: 5462 at lib/list_debug.c:35 \ __list_add_valid_or_report+0xf3/0x130 CPU: 18 UID: 0
PID: 5462 Comm: ping Kdump: loaded Not tainted 6.13.0-rc7+ RIP: 0010:__list_add_valid_or_report+0xf3/0x130
Call Trace: ? __warn+0xcd/0x250 ? __list_add_valid_or_report+0xf3/0x130 enqueue_to_backlog+0x923/0x1070
netif_rx_internal+0x92/0x2b0 __netif_rx+0x15/0x170 loopback_xmit+0x2ef/0x450
dev_hard_start_xmit+0x103/0x490 __dev_queue_xmit+0xeac/0x1950 ip_finish_output2+0x6cc/0x1620
ip_output+0x161/0x270 ip_push_pending_frames+0x155/0x1a0 raw_sendmsg+0xe13/0x1550 __sys_sendto+0x3bf/0x4e0
__x64_sys_sendto+0xdc/0x1b0 do_syscall_64+0x5b/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e The
reproduction command is as follows: sysctl -w net.core.dev_weight=0 ping 127.0.0.1 This is because when
the napi's weight is set to 0, process_backlog() may return 0 and clear the NAPI_STATE_SCHED bit of
napi->state, causing this napi to be re-polled in net_rx_action() until __do_softirq() times out. Since
the NAPI_STATE_SCHED bit has been cleared, napi_schedule_rps() can be retriggered in enqueue_to_backlog(),
causing this issue. Making the napi's weight always non-zero solves this problem. Triggering this issue
requires system-wide admin (setting is not namespaced). (CVE-2025-21806)

Solution

Update the sys-kernel/csql-kernel-6_1 library and its related packages to version 17800.519.1 or later.

Plugin Details

Severity: Medium

ID: 454039

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/1/2026

Updated: 10/1/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

Vendor

Vendor Severity: MEDIUM

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2025-21806

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 4/9/2024

Reference Information

CVE: CVE-2025-21806

Detections

Analytics