Detections
Analytics

Echo: linux: security update to 6.1.164-1

medium Tenable Cloud Security Plugin ID 458429

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix infinite loop caused by
 next_smb2_rcv_hdr_off reset in error paths The problem occurs when a signed request fails smb2 signature
 verification check. In __process_request(), if check_sign_req() returns an error,
 set_smb2_rsp_status(work, STATUS_ACCESS_DENIED) is called. set_smb2_rsp_status() set
 work->next_smb2_rcv_hdr_off as zero. By resetting next_smb2_rcv_hdr_off to zero, the pointer to the next
 command in the chain is lost. Consequently, is_chained_smb2_message() continues to point to the same
 request header instead of advancing. If the header's NextCommand field is non-zero, the function returns
 true, causing __handle_ksmbd_work() to repeatedly process the same failed request in an infinite loop.
 This results in the kernel log being flooded with "bad smb2 signature" messages and high CPU usage. This
 patch fixes the issue by changing the return value from SERVER_HANDLER_CONTINUE to SERVER_HANDLER_ABORT.
 This ensures that the processing loop terminates immediately rather than attempting to continue from an
 invalidated offset. (CVE-2026-23220)

Solution

Update the linux library and its related packages to version 6.1.164-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-23220

Plugin Details

Severity: Medium

ID: 458429

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.75

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2026-23220

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 2/19/2026

Vulnerability Publication Date: 2/18/2026

Reference Information

CVE: CVE-2026-23220