Detections
Analytics

Echo: linux: security update to 6.1.170-3

high Tenable Cloud Security Plugin ID 464521

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE
 packets when paged frags are present The DATA-packet handler in rxrpc_input_call_event() and the RESPONSE
 handler in rxrpc_verify_response() copy the skb to a linear one before calling into the security ops only
 when skb_cloned() is true. An skb that is not cloned but still carries externally-owned paged fragments
 (e.g. SKBFL_SHARED_FRAG set by splice() into a UDP socket via __ip_append_data, or a chained
 skb_has_frag_list()) falls through to the in-place decryption path, which binds the frag pages directly
 into the AEAD/skcipher SGL via skb_to_sgvec(). Extend the gate to also unshare when skb_has_frag_list() or
 skb_has_shared_frag() is true. This catches the splice-loopback vector and other externally-shared frag
 sources while preserving the zero-copy fast path for skbs whose frags are kernel-private (e.g. NIC
 page_pool RX, GRO). The OOM/trace handling already in place is reused. (CVE-2026-43500)

Solution

Update the linux library and its related packages to version 6.1.170-3 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-43500

Plugin Details

Severity: High

ID: 464521

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Critical

Score: 9.2

Percentile: 99.76

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-43500

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 7.2

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 5/8/2026

Vulnerability Publication Date: 5/8/2026

Exploitable With

Metasploit (rxkad Page-Cache Write via CVE-2026-43500)

Reference Information

CVE: CVE-2026-43500