Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_6, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_6, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_6, sys-kernel/lakitu-vgpu-kernel-6_6: security update to 19216.739.5

high Tenable Cloud Security Plugin ID 475121

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: detach dataplane
timeout policy and repurpose refcount Add a refcount for struct nf_ct_timeout which is used by ct
extension to set the custom ct timeout policy, this tells us that the ct timeout is being used by a
conntrack entry. When the last conntrack entry drops the refcount on the ct timeout, the ct timeout is
released. Remove the refcount for control plane which controls if the ruleset refers to the timeout
policy. After this update, it is possible to remove the ct timeout policy from nfnetlink_cttimeout
immediately. This is for simplicity not to handle two refcounts on a single object. Remove
nf_queue_nf_hook_drop(): a packet sitting in nfqueue will just hold a reference to the nf_ct_timeout
object until packet is reinjected, since this is part of the ct extension, this will be released by the
time the conntrack is freed. nf_ct_untimeout() is still called to clean up in a best effort basis: the ct
timeout on existing entries gets removed when the ct timeout goes away, but as long as the iptables
ruleset still refers to the ct timeout through a template, new conntracks may keep attaching it and extend
its lifetime until the rule is removed. nf_ct_untimeout() is not called anymore from module removal path,
this is unlikely to find timeouts give module refcount is bumped, and the new refcount already tracks the
ct timeout policy use so it is released when unused. (CVE-2026-74347)

Solution

Update the sys-kernel/cchost-kernel-6_12 library and its related packages to version 19216.739.5 or later.

Plugin Details

Severity: High

ID: 475121

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/16/2026

Updated: 10/16/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.18

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-74347

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 8/15/2026

Reference Information

CVE: CVE-2026-74347

Detections

Analytics