Google: sys-kernel/lakitu-kernel-6_1, sys-kernel/lakitu-kernel-6_6: security update to 18613.164.109

high Tenable Cloud Security Plugin ID 466462

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is
online in kvm_get_vcpu() Explicitly verify the target vCPU is fully online _prior_ to clamping the index
in kvm_get_vcpu(). If the index is "bad", the nospec clamping will generate '0', i.e. KVM will return
vCPU0 instead of NULL. In practice, the bug is unlikely to cause problems, as it will only come into play
if userspace or the guest is buggy or misbehaving, e.g. KVM may send interrupts to vCPU0 instead of
dropping them on the floor. However, returning vCPU0 when it shouldn't exist per online_vcpus is
problematic now that KVM uses an xarray for the vCPUs array, as KVM needs to insert into the xarray before
publishing the vCPU to userspace (see commit c5b077549136 ("KVM: Convert the kvm->vcpus array to a
xarray")), i.e. before vCPU creation is guaranteed to succeed. As a result, incorrectly providing access
to vCPU0 will trigger a use-after-free if vCPU0 is dereferenced and kvm_vm_ioctl_create_vcpu() bails out
of vCPU creation due to an error and frees vCPU0. Commit afb2acb2e3a3 ("KVM: Fix vcpu_array[0] races")
papered over that issue, but in doing so introduced an unsolvable teardown conundrum. Preventing accesses
to vCPU0 before it's fully online will allow reverting commit afb2acb2e3a3, without re-introducing the
vcpu_array[0] UAF race. (CVE-2024-58083)

Solution

Update the sys-kernel/lakitu-kernel-6_1 library and its related packages to version 18613.164.109 or later.

Plugin Details

Severity: High

ID: 466462

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.12

Vendor

Vendor Severity: HIGH

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2024-58083

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 3/6/2025

Reference Information

CVE: CVE-2024-58083

Detections

Analytics