Detections
Analytics

Echo: linux: security update to 6.10.6-1

high Tenable Cloud Security Plugin ID 464808

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix TX fifo
 corruption Sometimes, when a packet is received on channel A at almost the same time as a packet is about
 to be transmitted on channel B, we observe with a logic analyzer that the received packet on channel A is
 transmitted on channel B. In other words, the Tx buffer data on channel B is corrupted with data from
 channel A. The problem appeared since commit 4409df5866b7 ("serial: sc16is7xx: change EFR lock to operate
 on each channels"), which changed the EFR locking to operate on each channel instead of chip-wise. This
 commit has introduced a regression, because the EFR lock is used not only to protect the EFR registers
 access, but also, in a very obscure and undocumented way, to protect access to the data buffer, which is
 shared by the Tx and Rx handlers, but also by each channel of the IC. Fix this regression first by
 switching to kfifo_out_linear_ptr() in sc16is7xx_handle_tx() to eliminate the need for a shared Rx/Tx
 buffer. Secondly, replace the chip-wise Rx buffer with a separate Rx buffer for each channel.
 (CVE-2024-44951)

Solution

Update the linux library and its related packages to version 6.10.6-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2024-44951

Plugin Details

Severity: High

ID: 464808

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.12

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2024-44951

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 9/15/2025

Vulnerability Publication Date: 9/4/2024

Reference Information

CVE: CVE-2024-44951