Detections
Analytics

Echo: linux: security update to 6.1.180-1

high Tenable Cloud Security Plugin ID 459035

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length
 underflow and OOB read in OnAuth() OnAuth() has two bugs in the shared-key authentication path. When the
 Privacy bit is set, rtw_wep_decrypt() is called without verifying that the frame is long enough to contain
 a valid WEP IV and ICV. Inside rtw_wep_decrypt(), length is computed as: length = len - WLAN_HDR_A3_LEN -
 iv_len and then passed as (length - 4) to crc32_le(). If len is less than WLAN_HDR_A3_LEN + iv_len +
 icv_len (32 bytes), length - 4 is negative and, after the implicit cast to size_t, causes crc32_le() to
 read far beyond the frame buffer. Add a minimum length check before accessing the IV field and calling the
 decryption path. When processing a seq=3 response, rtw_get_ie() stores the Challenge Text IE length in
 ie_len, but the subsequent memcmp() always reads 128 bytes regardless of ie_len. IEEE 802.11 mandates a
 challenge text of exactly 128 bytes; reject any IE whose length field differs, matching the check already
 applied to OnAuthClient(). (CVE-2026-64445)

Solution

Update the linux library and its related packages to version 6.1.180-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-64445

Plugin Details

Severity: High

ID: 459035

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.27

CVSS v2

Risk Factor: High

Base Score: 8.3

Temporal Score: 6.1

Vector: CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-64445

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.7

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 7/26/2026

Vulnerability Publication Date: 7/23/2026

Reference Information

CVE: CVE-2026-64445