Detections
Analytics

Echo: linux: security update to 6.1.153-1

high Tenable Cloud Security Plugin ID 461953

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma: Fix memory
 allocation size for queue_priority_map Fix a critical memory allocation bug in edma_setup_from_hw() where
 queue_priority_map was allocated with insufficient memory. The code declared queue_priority_map as s8
 (*)[2] (pointer to array of 2 s8), but allocated memory using sizeof(s8) instead of the correct size. This
 caused out-of-bounds memory writes when accessing: queue_priority_map[i][0] = i; queue_priority_map[i][1]
 = i; The bug manifested as kernel crashes with "Oops - undefined instruction" on ARM platforms
 (BeagleBoard-X15) during EDMA driver probe, as the memory corruption triggered kernel hardening features
 on Clang. Change the allocation to use sizeof(*queue_priority_map) which automatically gets the correct
 size for the 2D array structure. (CVE-2025-39869)

Solution

Update the linux library and its related packages to version 6.1.153-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2025-39869

Plugin Details

Severity: High

ID: 461953

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.3

Percentile: 53.37

CVSS v2

Risk Factor: Medium

Base Score: 6.2

Temporal Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C

CVSS Score Source: CVE-2025-39869

CVSS v3

Risk Factor: High

Base Score: 7.1

Temporal Score: 6.2

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 10/22/2025

Vulnerability Publication Date: 9/23/2025

Reference Information

CVE: CVE-2025-39869