Detections
Analytics

Echo: linux: security update to 6.1.176-1

medium Tenable Cloud Security Plugin ID 460058

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: IB/isert: Reject login PDUs shorter
 than ISER_HEADERS_LEN In drivers/infiniband/ulp/isert/ib_isert.c, isert_login_recv_done() computes the
 login request payload length as wc->byte_len minus ISER_HEADERS_LEN with no lower bound, and login_req_len
 is a signed int. A remote iSER initiator can post a login Send work request carrying fewer than
 ISER_HEADERS_LEN (76) bytes, so the subtraction underflows and login_req_len becomes negative.
 isert_rx_login_req() then reads that negative length back into a signed int, takes size = min(rx_buflen,
 MAX_KEY_VALUE_PAIRS), and because the min() is signed it keeps the negative value; the value is then
 passed as the memcpy() length and sign-extended to a multi-gigabyte size_t. The copy into the 8192-byte
 login->req_buf runs far out of bounds and faults, crashing the target node. The login phase precedes iSCSI
 authentication, so no credentials are required to reach this path. Reject any login PDU shorter than
 ISER_HEADERS_LEN before the subtraction, mirroring the existing early return on a failed work completion,
 so login_req_len can never go negative. The upper bound was already safe: a posted login buffer cannot
 deliver more than ISER_RX_PAYLOAD_SIZE, so the difference stays at or below MAX_KEY_VALUE_PAIRS and the
 existing min() clamps it; only the missing lower bound needs to be added. (CVE-2026-53176)

Solution

Update the linux library and its related packages to version 6.1.176-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-53176

Plugin Details

Severity: Medium

ID: 460058

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 6

Percentile: 96.59

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-53176

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.7

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 6/25/2026

Vulnerability Publication Date: 6/25/2026

Reference Information

CVE: CVE-2026-53176