Echo: linux: security update to 6.1.176-1

high Tenable Cloud Security Plugin ID 460378

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: media: hackrf: fix to not free memory
after the device is registered in hackrf_probe() In hackrf driver, the following race condition occurs:
``` CPU0 CPU1 hackrf_probe() kzalloc(); // alloc hackrf_dev .... v4l2_device_register(); .... fd =
sys_open("/path/to/dev"); // open hackrf fd .... v4l2_device_unregister(); .... kfree(); // free
hackrf_dev .... sys_ioctl(fd, ...); v4l2_ioctl(); video_is_registered() // UAF!! .... sys_close(fd);
v4l2_release() // UAF!! hackrf_video_release() kfree(); // DFB!! ``` When a V4L2 or video device is
unregistered, the device node is removed so new open() calls are blocked. However, file descriptors that
are already open-and any in-flight I/O-do not terminate immediately; they remain valid until the last
reference is dropped and the driver's release() is invoked. Therefore, freeing device memory on the error
path after hackrf_probe() has registered dev it will lead to a race to use-after-free vuln, since those
already-open handles haven't been released yet. And since release() free memory too, race to use-after-
free and double-free vuln occur. To prevent this, if device is registered from probe(), it should be
modified to free memory only through release() rather than calling kfree() directly. (CVE-2026-31576)

Solution

Update the linux library and its related packages to version 6.1.176-1 or later.

Plugin Details

Severity: High

ID: 460378

Version: Revision 1.1

Type: Local

Family: Echo Local Security Checks

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.14

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-31576

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 5/1/2026

Vulnerability Publication Date: 4/24/2026

Reference Information

CVE: CVE-2026-31576

Detections

Analytics