Google: sys-kernel/csql-kernel-6_1, sys-kernel/csql-kernel-6_6, sys-kernel/lakitu-kernel-6_1, sys-kernel/lakitu-kernel-6_6, sys-kernel/lakitu-nc-kernel-6_6, sys-kernel/lakitu-vgpu-kernel-6_6, sys-kernel/tpusev-kernel-6_6: security update to 18613.613.5

medium Tenable Cloud Security Plugin ID 466126

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: ext4: don't cache extent during
splitting extent Caching extents during the splitting process is risky, as it may result in stale extents
remaining in the status tree. Moreover, in most cases, the corresponding extent block entries are likely
already cached before the split happens, making caching here not particularly useful. Assume we have an
unwritten extent, and then DIO writes the first half. [UUUUUUUUUUUUUUUU] on-disk extent U: unwritten
extent [UUUUUUUUUUUUUUUU] extent status tree |<- ->| ----> dio write this range First, when
ext4_split_extent_at() splits this extent, it truncates the existing extent and then inserts a new one.
During this process, this extent status entry may be shrunk, and calls to ext4_find_extent() and
ext4_cache_extents() may occur, which could potentially insert the truncated range as a hole into the
extent status tree. After the split is completed, this hole is not replaced with the correct status.
[UUUUUUU|UUUUUUUU] on-disk extent U: unwritten extent [UUUUUUU|HHHHHHHH] extent status tree H: hole Then,
the outer calling functions will not correct this remaining hole extent either. Finally, if we perform a
delayed buffer write on this latter part, it will re-insert the delayed extent and cause an error in space
accounting. In adition, if the unwritten extent cache is not shrunk during the splitting,
ext4_cache_extents() also conflicts with existing extents when caching extents. In the future, we will add
checks when caching extents, which will trigger a warning. Therefore, Do not cache extents that are being
split. (CVE-2026-45912)

Solution

Update the sys-kernel/csql-kernel-6_1 library and its related packages to version 18613.613.5 or later.

Plugin Details

Severity: Medium

ID: 466126

Version: Revision 1.3

Type: Local

Family: Google COS Security Checks

Published: 10/2/2026

Updated: 10/3/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.77

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2026-45912

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 3/12/2026

Reference Information

CVE: CVE-2026-45912

Detections

Analytics