Google: sys-kernel/lakitu-kernel-6_1, sys-kernel/lakitu-kernel-6_6: security update to 18613.0.3

medium Tenable Cloud Security Plugin ID 471838

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: Revert "sched/fair: Make sure to try
to detach at least one movable task" This reverts commit b0defa7ae03ecf91b8bfd10ede430cff12fcbd06.
b0defa7ae03ec changed the load balancing logic to ignore env.max_loop if all tasks examined to that point
were pinned. The goal of the patch was to make it more likely to be able to detach a task buried in a long
list of pinned tasks. However, this has the unfortunate side effect of creating an O(n) iteration in
detach_tasks(), as we now must fully iterate every task on a cpu if all or most are pinned. Since this
load balance code is done with rq lock held, and often in softirq context, it is very easy to trigger hard
lockups. We observed such hard lockups with a user who affined O(10k) threads to a single cpu. When I
discussed this with Vincent he initially suggested that we keep the limit on the number of tasks to
detach, but increase the number of tasks we can search. However, after some back and forth on the mailing
list, he recommended we instead revert the original patch, as it seems likely no one was actually getting
hit by the original issue. (CVE-2024-42245)

Solution

Update the sys-kernel/lakitu-kernel-6_1 library and its related packages to version 18613.0.3 or later.

Plugin Details

Severity: Medium

ID: 471838

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/3/2026

Updated: 10/3/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

Vendor

Vendor Severity: MEDIUM

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2024-42245

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 8/7/2024

Reference Information

CVE: CVE-2024-42245

Detections

Analytics