Detections
Analytics

Echo: linux: security update to 6.1.159-1

high Tenable Cloud Security Plugin ID 458613

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: orangefs: fix xattr related buffer
 overflow... Willy Tarreau <[email protected]> forwarded me a message from Disclosure <[email protected]> with
 the following warning: > The helper `xattr_key()` uses the pointer variable in the loop condition > rather
 than dereferencing it. As `key` is incremented, it remains non-NULL > (until it runs into unmapped
 memory), so the loop does not terminate on > valid C strings and will walk memory indefinitely, consuming
 CPU or hanging > the thread. I easily reproduced this with setfattr and getfattr, causing a kernel oops,
 hung user processes and corrupted orangefs files. Disclosure sent along a diff (not a patch) with a
 suggested fix, which I based this patch on. After xattr_key started working right, xfstest generic/069
 exposed an xattr related memory leak that lead to OOM. xattr_key returns a hashed key. When adding xattrs
 to the orangefs xattr cache, orangefs used hash_add, a kernel hashing macro. hash_add also hashes the key
 using hash_log which resulted in additions to the xattr cache going to the wrong hash bucket. generic/069
 tortures a single file and orangefs does a getattr for the xattr "security.capability" every time.
 Orangefs negative caches on xattrs which includes a kmalloc. Since adds to the xattr cache were going to
 the wrong bucket, every getattr for "security.capability" resulted in another kmalloc, none of which were
 ever freed. I changed the two uses of hash_add to hlist_add_head instead and the memory leak ceased and
 generic/069 quit throwing furniture. (CVE-2025-40306)

Solution

Update the linux library and its related packages to version 6.1.159-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2025-40306

Plugin Details

Severity: High

ID: 458613

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.12

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2025-40306

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 12/8/2025

Vulnerability Publication Date: 12/8/2025

Reference Information

CVE: CVE-2025-40306