Google: sys-kernel/csql-kernel-6_1, sys-kernel/csql-kernel-6_6: security update to 18613.534.110

critical Tenable Cloud Security Plugin ID 465628

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: linearize skb
before parsing ND options br_nd_send() parses neighbour discovery options from ns->opt[] and assumes that
these options are in the linear part of request. Its callers only guarantee that the ICMPv6 header and
target address are available, so the option area can still be non-linear. Parsing ns->opt[] in that case
can access data past the linear buffer. Linearize request before option parsing and derive ns from the
linear network header. (CVE-2026-31682)

Solution

Update the sys-kernel/csql-kernel-6_1 library and its related packages to version 18613.534.110 or later.

Plugin Details

Severity: Critical

ID: 465628

Version: Revision 1.2

Type: Local

Family: Google COS Security Checks

Published: 10/2/2026

Updated: 10/3/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 6.3

Percentile: 96.77

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: High

Base Score: 9.4

Temporal Score: 7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:C

CVSS Score Source: CVE-2026-31682

CVSS v3

Risk Factor: Critical

Base Score: 9.1

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 4/23/2026

Reference Information

CVE: CVE-2026-31682

Detections

Analytics