Echo: linux: security update to 6.1.162-1

medium Tenable Cloud Security Plugin ID 465035

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incorrect
qlen reduction in cake_drop In cake_drop(), qdisc_tree_reduce_backlog() is used to update the qlen and
backlog of the qdisc hierarchy. Its caller, cake_enqueue(), assumes that the parent qdisc will enqueue the
current packet. However, this assumption breaks when cake_enqueue() returns NET_XMIT_CN: the parent qdisc
stops enqueuing current packet, leaving the tree qlen/backlog accounting inconsistent. This mismatch can
lead to a NULL dereference (e.g., when the parent Qdisc is qfq_qdisc). This patch computes the
qlen/backlog delta in a more robust way by observing the difference before and after the series of
cake_drop() calls, and then compensates the qdisc tree accounting if cake_enqueue() returns NET_XMIT_CN.
To ensure correct compensation when ACK thinning is enabled, a new variable is introduced to keep qlen
unchanged. (CVE-2025-68325)

Solution

Update the linux library and its related packages to version 6.1.162-1 or later.

Plugin Details

Severity: Medium

ID: 465035

Version: Revision 1.1

Type: Local

Family: Echo Local Security Checks

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.46

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2025-68325

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 12/18/2025

Vulnerability Publication Date: 12/18/2025

Reference Information

CVE: CVE-2025-68325

Detections

Analytics