Google: sys-kernel/csql-kernel-6_6, sys-kernel/lakitu-kernel-6_6, sys-kernel/lakitu-nc-kernel-6_6, sys-kernel/lakitu-vgpu-kernel-6_6: security update to 18867.528.65

high Tenable Cloud Security Plugin ID 467474

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: net/packet: avoid fanout hook re-
registration after unregister packet_set_ring() temporarily detaches a socket from packet delivery while
reconfiguring its ring. It records the previous running state, clears po->num, unregisters the protocol
hook when needed, drops po->bind_lock, and later restores po->num and re-registers the hook from the saved
was_running value. That unlocked window can race with NETDEV_UNREGISTER. The notifier can observe the
socket as not running, skip __unregister_prot_hook(), and invalidate the per-socket binding by setting
po->ifindex to -1 and clearing po->prot_hook.dev. A one-member fanout group can still retain its shared
fanout hook device pointer. When packet_set_ring() resumes, re-registering solely from the stale
was_running state can re-add the fanout hook after the device has been unregistered. Treat po->ifindex ==
-1 as an invalidated binding after reacquiring po->bind_lock. This is distinct from ifindex 0, the normal
unbound/wildcard state: ifindex -1 marks an existing device binding that was invalidated when the device
was unregistered. Restore po->num as before, but do not re-register the hook if device unregister already
detached the socket. (CVE-2026-68338)

Solution

Update the sys-kernel/csql-kernel-6_6 library and its related packages to version 18867.528.65 or later.

Plugin Details

Severity: High

ID: 467474

Version: Revision 1.5

Type: Local

Family: Google COS Security Checks

Published: 10/3/2026

Updated: 10/6/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 6.9

Percentile: 96.53

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-68338

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 8/10/2026

Reference Information

CVE: CVE-2026-68338

Detections

Analytics