Detections
Analytics

Echo: linux: security update to 6.1.170-1

critical Tenable Cloud Security Plugin ID 458335

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: seg6: separate dst_cache for input and
 output paths in seg6 lwtunnel The seg6 lwtunnel uses a single dst_cache per encap route, shared between
 seg6_input_core() and seg6_output_core(). These two paths can perform the post-encap SID lookup in
 different routing contexts (e.g., ip rules matching on the ingress interface, or VRF table separation).
 Whichever path runs first populates the cache, and the other reuses it blindly, bypassing its own lookup.
 Fix this by splitting the cache into cache_input and cache_output, so each path maintains its own cached
 dst independently. (CVE-2026-31668)

Solution

Update the linux library and its related packages to version 6.1.170-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-31668

Plugin Details

Severity: Critical

ID: 458335

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.96

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-31668

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 5/1/2026

Vulnerability Publication Date: 4/23/2026

Reference Information

CVE: CVE-2026-31668