Detections
Analytics

Echo: linux: security update to 6.1.187-1

high Tenable Cloud Security Plugin ID 457044

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized
 device packet size mms114_interrupt() reads a packet of touch data from the device into a fixed-size on-
 stack buffer struct mms114_touch touch[MMS114_MAX_TOUCH]; which holds MMS114_MAX_TOUCH (10) events of
 MMS114_EVENT_SIZE (8) bytes, i.e. 80 bytes. The length of the I2C read into it is taken verbatim from the
 device: packet_size = mms114_read_reg(data, MMS114_PACKET_SIZE); if (packet_size <= 0) goto out; ... error
 = __mms114_read_reg(data, MMS114_INFORMATION, packet_size, (u8 *)touch); packet_size is a single device
 register byte (0x0F) and the only check is the lower bound packet_size <= 0; it is never bounded against
 the size of touch[]. A malfunctioning, malicious or counterfeit controller (or an attacker tampering with
 the I2C bus) can report a packet_size of up to 255, so __mms114_read_reg() writes up to 175 bytes past the
 end of touch[] on the IRQ-thread stack: a stack out-of-bounds write that can overwrite the stack canary,
 saved registers and the return address. A well-formed device never reports more than the buffer holds, so
 reject an oversized packet and drop the report, consistent with the handler's other error paths, rather
 than reading past the buffer. (CVE-2026-64270)

Solution

Update the linux library and its related packages to version 6.1.187-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-64270

Plugin Details

Severity: High

ID: 457044

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.15

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-64270

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 7/26/2026

Vulnerability Publication Date: 7/23/2026

Reference Information

CVE: CVE-2026-64270