Google: sys-kernel/lakitu-kernel-6_1, sys-kernel/lakitu-kernel-6_6: security update to 18613.0.41

medium Tenable Cloud Security Plugin ID 465983

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUG_ON() while
continue reshape after reassembling Currently, mdadm support --revert-reshape to abort the reshape while
reassembling, as the test 07revert-grow. However, following BUG_ON() can be triggerred by the test: kernel
BUG at drivers/md/raid5.c:6278! invalid opcode: 0000 [#1] PREEMPT SMP PTI irq event stamp: 158985 CPU: 6
PID: 891 Comm: md0_reshape Not tainted 6.9.0-03335-g7592a0b0049a #94 RIP: 0010:reshape_request+0x3f1/0xe60
Call Trace: <TASK> raid5_sync_request+0x43d/0x550 md_do_sync+0xb7a/0x2110 md_thread+0x294/0x2b0
kthread+0x147/0x1c0 ret_from_fork+0x59/0x70 ret_from_fork_asm+0x1a/0x30 </TASK> Root cause is that
--revert-reshape update the raid_disks from 5 to 4, while reshape position is still set, and after
reassembling the array, reshape position will be read from super block, then during reshape the checking
of 'writepos' that is caculated by old reshape position will fail. Fix this panic the easy way first, by
converting the BUG_ON() to WARN_ON(), and stop the reshape if checkings fail. Noted that mdadm must fix
--revert-shape as well, and probably md/raid should enhance metadata validation as well, however this
means reassemble will fail and there must be user tools to fix the wrong metadata. (CVE-2024-43914)

Solution

Update the sys-kernel/lakitu-kernel-6_1 library and its related packages to version 18613.0.41 or later.

Plugin Details

Severity: Medium

ID: 465983

Version: Revision 1.2

Type: Local

Family: Google COS Security Checks

Published: 10/2/2026

Updated: 10/3/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

Vendor

Vendor Severity: MEDIUM

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2024-43914

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 8/26/2024

Reference Information

CVE: CVE-2024-43914

Detections

Analytics