Detections
Analytics

Google: sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_6: security update to 19216.0.53

high Tenable Cloud Security Plugin ID 471999

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: io_uring/net: commit partial buffers
 on retry Ring provided buffers are potentially only valid within the single execution context in which
 they were acquired. io_uring deals with this and invalidates them on retry. But on the networking side, if
 MSG_WAITALL is set, or if the socket is of the streaming type and too little was processed, then it will
 hang on to the buffer rather than recycle or commit it. This is problematic for two reasons: 1) If someone
 unregisters the provided buffer ring before a later retry, then the req->buf_list will no longer be valid.
 2) If multiple sockers are using the same buffer group, then multiple receives can consume the same
 memory. This can cause data corruption in the application, as either receive could land in the same
 userspace buffer. Fix this by disallowing partial retries from pinning a provided buffer across multiple
 executions, if ring provided buffers are used. (CVE-2025-38730)

Solution

Update the sys-kernel/csql-kernel-6_12 library and its related packages to version 19216.0.53 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-125.oval.xml.tar.gz

Plugin Details

Severity: High

ID: 471999

Version: Revision 1.3

Type: Local

Published: 10/3/2026

Updated: 10/5/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.29

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2025-38730

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 9/4/2025

Reference Information

CVE: CVE-2025-38730