Detections
Analytics
Echo: linux: security update to 6.1.147-1
medium Tenable Cloud Security Plugin ID 462043
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: fix a potential
crash on gso_skb handling SFQ has an assumption of always being able to queue at least one packet.
However, after the blamed commit, sch->q.len can be inflated by packets in sch->gso_skb, and an enqueue()
on an empty SFQ qdisc can be followed by an immediate drop. Fix sfq_drop() to properly clear q->tail in
this situation. ip netns add lb ip link add dev to-lb type veth peer name in-lb netns lb ethtool -K to-lb
tso off # force qdisc to requeue gso_skb ip netns exec lb ethtool -K in-lb gro on # enable NAPI ip link
set dev to-lb up ip -netns lb link set dev in-lb up ip addr add dev to-lb 192.168.20.1/24 ip -netns lb
addr add dev in-lb 192.168.20.2/24 tc qdisc replace dev to-lb root sfq limit 100 ip netns exec lb
netserver netperf -H 192.168.20.2 -l 100 & netperf -H 192.168.20.2 -l 100 & netperf -H 192.168.20.2 -l 100
& netperf -H 192.168.20.2 -l 100 & (CVE-2025-38115)
Solution
Update the linux library and its related packages to version 6.1.147-1 or later.See Also
Plugin Details
Severity: Medium
ID: 462043
Version: Revision 1.1
Type: Local
Family: Echo Local Security Checks
Published: 10/2/2026
Updated: 10/2/2026
Risk Information
VPR
Risk Factor: Medium
Score: 5.7
Percentile: 97
CVSS v2
Risk Factor: Medium
Base Score: 4.6
Temporal Score: 3.4
Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C
CVSS Score Source: CVE-2025-38115
CVSS v3
Risk Factor: Medium
Base Score: 5.5
Temporal Score: 4.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 9/15/2025
Vulnerability Publication Date: 7/3/2025
Reference Information
CVE: CVE-2025-38115