Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 20198.0.0

high Tenable Cloud Security Plugin ID 475648

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent freeing a
timer which is queued on the expiry list Kijo analyzed another race in the POSIX CPU timer code: Commit
bf635681c906 converted cpu_timer::firing from a tristate value to a boolean. This lost the distinction
between "not owned by the firing list" and "still owned, but delivery was canceled". The resulting race
is: expiry handler timer_settime() timer_delete() -------------- --------------- -------------- collect
timer onto private firing list firing = true observes firing = true firing = false return TIMER_RETRY wait
for handler observes firing = false finish deletion unhash and free timer resume list traversal read freed
elist.next -> UAF The firing bit is clearly the wrong indicator since that commit. Check whether the timer
is queued on the expiry list or not instead. If it is queued clear the firing bit to prevent signal
delivery as before and return TIMER_RETRY so the caller unlocks the timer which allows the expiry code to
make progress and remove it from the list. (CVE-2026-98258)

Solution

Update the sys-kernel/cchost-kernel-6_18 library and its related packages to version 20198.0.0 or later.

Plugin Details

Severity: High

ID: 475648

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/16/2026

Updated: 10/16/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.4

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-98258

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 10/6/2026

Reference Information

CVE: CVE-2026-98258

Detections

Analytics