Detections
Analytics

Google: sys-kernel/csql-kernel-6_6, sys-kernel/lakitu-kernel-6_6, sys-kernel/lakitu-nc-kernel-6_6, sys-kernel/lakitu-vgpu-kernel-6_6: security update to 18867.584.3

critical Tenable Cloud Security Plugin ID 467109

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix
 parse_dcc() off-by-one OOB read parse_dcc() treats data_end as an inclusive end pointer, but its only
 caller passes data_limit = ib_ptr + datalen, which points one past the last valid byte. The newline search
 loop iterates while tmp <= data_end, so when no newline is present, *tmp is read at tmp == data_end, one
 byte beyond the region filled by skb_header_pointer(). irc_buffer is kmalloc'd as MAX_SEARCH_SIZE + 1
 bytes and datalen is capped at MAX_SEARCH_SIZE, so the stray read does not fault. The byte is
 uninitialized or stale; if it contains an ASCII digit, simple_strtoul will consume it and produce a wrong
 DCC IP or port in the conntrack expectation. The extra allocation byte is also a fragile guard: if the cap
 or allocation size changes, this becomes a real out-of-bounds read. Change the loop and its post-loop
 check to use strict less-than, consistent with the caller's exclusive-end convention. Update the function
 comment accordingly. (CVE-2026-80603)

Solution

Update the sys-kernel/csql-kernel-6_6 library and its related packages to version 18867.584.3 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-121.oval.xml.tar.gz

Plugin Details

Severity: Critical

ID: 467109

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 6.3

Percentile: 96.34

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: High

Base Score: 9.4

Temporal Score: 7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:N

CVSS Score Source: CVE-2026-80603

CVSS v3

Risk Factor: Critical

Base Score: 9.1

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 8/17/2026

Reference Information

CVE: CVE-2026-80603