Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_6, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_6, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_6, sys-kernel/lakitu-vgpu-kernel-6_6: security update to 19216.532.96

high Tenable Cloud Security Plugin ID 469191

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Latch disable_idle_d3 per
device When disable_idle_d3 was introduced in vfio-pci, it directly manipulated the device power state
with pci_set_power_state(). There were no refcounts to maintain or balanced operations, we could
unconditionally bring the device to D0 and conditionally move it to D3hot. Therefore the module parameter
was made writable. Later, in commit c61302aa48f7 ("vfio/pci: Move module parameters to vfio_pci.c"), as
part of the vfio-pci-core split, the writable aspect of the module parameter was nullified. The parameter
value could still be changed through sysfs, but the vfio-pci driver latched the values into vfio-pci-core
globals at module init. Loading the vfio-pci module, or unloading and reloading, with non-default or
different values could change the globals relative to existing devices bound to vfio-pci variant drivers.
Runtime PM was introduced in commit 7ab5e10eda02 ("vfio/pci: Move the unused device into low power state
with runtime PM"), which marks the point where power states became refcounted. PM get and put operations
need to be balanced, but the same module operations noted above can change the global variables relative
to those devices already bound to vfio-pci variant drivers. This introduces a window where PM operations
can now become unbalanced. To resolve this with a narrow footprint for stable backports, the
disable_idle_d3 flag is latched into the vfio_pci_core_device at the time of initialization, such that the
device always operates with a consistent value. NB. vfio_pci_dev_set_try_reset() now unconditionally
raises the runtime PM usage count around bus reset to account for disable_idle_d3 becoming a per-device
rather than global flag. When this flag is set, the additional get/put pair is harmless and allows
continued use of the shared vfio_pci_dev_set_pm_runtime_get() helper. (CVE-2026-64476)

Solution

Update the sys-kernel/cchost-kernel-6_12 library and its related packages to version 19216.532.96 or later.

Plugin Details

Severity: High

ID: 469191

Version: Revision 1.5

Type: Local

Family: Google COS Security Checks

Published: 10/3/2026

Updated: 10/6/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.23

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-64476

CVSS v3

Risk Factor: High

Base Score: 8.4

Temporal Score: 7.3

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 7/23/2026

Reference Information

CVE: CVE-2026-64476

Detections

Analytics