Detections
Analytics

Google: sys-kernel/csql-kernel-6_1, sys-kernel/csql-kernel-6_6, sys-kernel/lakitu-kernel-6_1, sys-kernel/lakitu-kernel-6_6, sys-kernel/lakitu-nc-kernel-6_6, sys-kernel/lakitu-vgpu-kernel-6_6, sys-kernel/tpusev-kernel-6_6: security update to 18613.613.5

high Tenable Cloud Security Plugin ID 466245

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqe_size before
 using it in ib_uverbs_post_send ib_uverbs_post_send() uses cmd.wqe_size from userspace without any
 validation before passing it to kmalloc() and using the allocated buffer as struct ib_uverbs_send_wr. If a
 user provides a small wqe_size value (e.g., 1), kmalloc() will succeed, but subsequent accesses to
 user_wr->opcode, user_wr->num_sge, and other fields will read beyond the allocated buffer, resulting in an
 out-of-bounds read from kernel heap memory. This could potentially leak sensitive kernel information to
 userspace. Additionally, providing an excessively large wqe_size can trigger a WARNING in the memory
 allocation path, as reported by syzkaller. This is inconsistent with ib_uverbs_unmarshall_recv() which
 properly validates that wqe_size >= sizeof(struct ib_uverbs_recv_wr) before proceeding. Add the same
 validation for ib_uverbs_post_send() to ensure wqe_size is at least sizeof(struct ib_uverbs_send_wr).
 (CVE-2026-45856)

Solution

Update the sys-kernel/csql-kernel-6_1 library and its related packages to version 18613.613.5 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-117.oval.xml.tar.gz

Plugin Details

Severity: High

ID: 466245

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.3

Percentile: 53.61

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 6.2

Temporal Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C

CVSS Score Source: CVE-2026-45856

CVSS v3

Risk Factor: High

Base Score: 7.1

Temporal Score: 6.2

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 3/12/2026

Reference Information

CVE: CVE-2026-45856