Detections
Analytics

Echo: linux: security update to 6.1.153-1

medium Tenable Cloud Security Plugin ID 464091

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: mm/ptdump: take the memory hotplug
 lock inside ptdump_walk_pgd() Memory hot remove unmaps and tears down various kernel page table regions as
 required. The ptdump code can race with concurrent modifications of the kernel page tables. When leaf
 entries are modified concurrently, the dump code may log stale or inconsistent information for a VA range,
 but this is otherwise not harmful. But when intermediate levels of kernel page table are freed, the dump
 code will continue to use memory that has been freed and potentially reallocated for another purpose. In
 such cases, the ptdump code may dereference bogus addresses, leading to a number of potential problems. To
 avoid the above mentioned race condition, platforms such as arm64, riscv and s390 take memory hotplug
 lock, while dumping kernel page table via the sysfs interface /sys/kernel/debug/kernel_page_tables.
 Similar race condition exists while checking for pages that might have been marked W+X via
 /sys/kernel/debug/kernel_page_tables/check_wx_pages which in turn calls ptdump_check_wx(). Instead of
 solving this race condition again, let's just move the memory hotplug lock inside generic
 ptdump_check_wx() which will benefit both the scenarios. Drop get_online_mems() and put_online_mems()
 combination from all existing platform ptdump code paths. (CVE-2025-38681)

Solution

Update the linux library and its related packages to version 6.1.153-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2025-38681

Plugin Details

Severity: Medium

ID: 464091

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 5.7

Percentile: 96.44

CVSS v2

Risk Factor: Low

Base Score: 3.8

Temporal Score: 2.8

Vector: CVSS2#AV:L/AC:H/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2025-38681

CVSS v3

Risk Factor: Medium

Base Score: 4.7

Temporal Score: 4.1

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 9/15/2025

Vulnerability Publication Date: 9/4/2025

Reference Information

CVE: CVE-2025-38681