Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_6, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_6, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_6, sys-kernel/lakitu-vgpu-kernel-6_6: security update to 19216.739.5

high Tenable Cloud Security Plugin ID 474998

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: xfrm: save input state data before
secpath resets xfrm_input() stores the current xfrm_state in the skb secpath while it continues receive-
side processing. Some input paths can reset that secpath before xfrm_input() has finished dereferencing
the state. Receive callback users such as VTI and XFRM interfaces can reset the secpath. The VTI receive
path does so before checking whether the packet crosses network namespaces, while the XFRM interface path
does so only for cross-network-namespace packets. The XFRM_MAX_DEPTH error path can also reset the secpath
before the final drop callback reports the current state's protocol. If secpath_reset() drops the last
state reference while the state is concurrently deleted, xfrm_input() can still dereference the freed
state when selecting transport_finish() or reporting the drop callback protocol. Save the state protocol
on the stack while the state is still valid, and use the already saved address family for
transport_finish(). A larval XFRM_STATE_ACQ state has no type, so retain nexthdr as its protocol. This
preserves the existing drop-path fallback while avoiding the post-reset state dereferences without adding
an extra state reference to every received packet. (CVE-2026-98229)

Solution

Update the sys-kernel/cchost-kernel-6_12 library and its related packages to version 19216.739.5 or later.

Plugin Details

Severity: High

ID: 474998

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/16/2026

Updated: 10/16/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.39

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-98229

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 10/6/2026

Reference Information

CVE: CVE-2026-98229

Detections

Analytics