Detections
Analytics

Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_6: security update to 19216.220.185

critical Tenable Cloud Security Plugin ID 472038

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: linearize skb
 before parsing ND options br_nd_send() parses neighbour discovery options from ns->opt[] and assumes that
 these options are in the linear part of request. Its callers only guarantee that the ICMPv6 header and
 target address are available, so the option area can still be non-linear. Parsing ns->opt[] in that case
 can access data past the linear buffer. Linearize request before option parsing and derive ns from the
 linear network header. (CVE-2026-31682)

Solution

Update the sys-kernel/cchost-kernel-6_12 library and its related packages to version 19216.220.185 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-125.oval.xml.tar.gz

Plugin Details

Severity: Critical

ID: 472038

Version: Revision 1.1

Type: Local

Published: 10/3/2026

Updated: 10/3/2026

Risk Information

VPR

Risk Factor: Medium

Score: 6.3

Percentile: 96.77

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: High

Base Score: 9.4

Temporal Score: 7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:C

CVSS Score Source: CVE-2026-31682

CVSS v3

Risk Factor: Critical

Base Score: 9.1

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 4/23/2026

Reference Information

CVE: CVE-2026-31682