Detections
Analytics

Google: sys-kernel/csql-kernel-6_1, sys-kernel/csql-kernel-6_6: security update to 18613.263.4

medium Tenable Cloud Security Plugin ID 471708

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid putting some root ports
 into D3 on TUXEDO Sirius Gen1 commit 9d26d3a8f1b0 ("PCI: Put PCIe ports into D3 during suspend") sets the
 policy that all PCIe ports are allowed to use D3. When the system is suspended if the port is not power
 manageable by the platform and won't be used for wakeup via a PME this sets up the policy for these ports
 to go into D3hot. This policy generally makes sense from an OSPM perspective but it leads to problems with
 wakeup from suspend on the TUXEDO Sirius 16 Gen 1 with a specific old BIOS. This manifests as a system
 hang. On the affected Device + BIOS combination, add a quirk for the root port of the problematic
 controller to ensure that these root ports are not put into D3hot at suspend. This patch is based on
 https://lore.kernel.org/linux-pci/[email protected] but with the added
 condition both in the documentation and in the code to apply only to the TUXEDO Sirius 16 Gen 1 with a
 specific old BIOS and only the affected root ports. (CVE-2025-21831)

Solution

Update the sys-kernel/csql-kernel-6_1 library and its related packages to version 18613.263.4 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-117.oval.xml.tar.gz

Plugin Details

Severity: Medium

ID: 471708

Version: Revision 1.1

Type: Local

Published: 10/3/2026

Updated: 10/3/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

Vendor

Vendor Severity: MEDIUM

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2025-21831

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 3/6/2025

Reference Information

CVE: CVE-2025-21831