Google: sys-kernel/cchost-kernel-6_12, sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.126

high Tenable Cloud Security Plugin ID 475581

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on
other devices __bpf_offload_dev_match() falls back to comparing offdev pointers after an exact netdev
mismatch. Bound-only programs normally have NULL offdevs, so unrelated netdevs compare equal. A bound-only
program on an offload-registered netdev can instead inherit a real offdev and match a sibling port. With
CAP_BPF and CAP_NET_ADMIN, a caller can use bpf(BPF_LINK_CREATE) with a different target ifindex to run
metadata kfuncs specialized for the bound driver on the target driver's xdp_buff. Running a veth-bound
program on tun reads beyond tun's bare stack xdp_buff as a veth_xdp_buff. Oops: general protection fault,
probably for non-canonical address KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
RIP: 0010:veth_xdp_rx_timestamp (drivers/net/veth.c:1673) Call Trace: ... tun_build_skb
(drivers/net/tun.c:1739) tun_get_user (drivers/net/tun.c:1856) tun_chr_write_iter (drivers/net/tun.c:2091)
vfs_write (fs/read_write.c:595 fs/read_write.c:687) ksys_write (fs/read_write.c:739) do_syscall_64
(arch/x86/entry/syscall_64.c:84) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) Kernel
panic - not syncing: Fatal exception in interrupt Restrict non-offloaded programs to exact netdev matches
and retain the shared-offdev fallback only for genuinely offloaded multi-port programs. (CVE-2026-98382)

Solution

Update the sys-kernel/cchost-kernel-6_12 library and its related packages to version 19999.44.126 or later.

Plugin Details

Severity: High

ID: 475581

Version: Revision 1.2

Type: Local

Family: Google COS Security Checks

Published: 10/16/2026

Updated: 10/27/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.52

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-98382

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 10/9/2026

Reference Information

CVE: CVE-2026-98382

Detections

Analytics