Google: sys-kernel/lakitu-kernel-6_1: security update to 18026.0.0

medium Tenable Self-Hosted Container Security Plugin ID 450553

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Add Cortex-A520
speculative unprivileged load workaround Implement the workaround for ARM Cortex-A520 erratum 2966298. On
an affected Cortex-A520 core, a speculatively executed unprivileged load might leak data from a privileged
load via a cache side channel. The issue only exists for loads within a translation regime with the same
translation (e.g. same ASID and VMID). Therefore, the issue only affects the return to EL0. The workaround
is to execute a TLBI before returning to EL0 after all loads of privileged data. A non-shareable TLBI to
any address is sufficient. The workaround isn't necessary if page table isolation (KPTI) is enabled, but
for simplicity it will be. Page table isolation should normally be disabled for Cortex-A520 as it supports
the CSV3 feature and the E0PD feature (used when KASLR is enabled). (CVE-2023-52481)

Solution

Update the sys-kernel/lakitu-kernel-6_1 library and its related packages to version 18026.0.0 or later.

Plugin Details

Severity: Medium

ID: 450553

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/1/2026

Updated: 10/1/2026

Risk Information

VPR

Risk Factor: Low

Score: 2.8

Percentile: 22.22

Vendor

Vendor Severity: MEDIUM

CVSS v2

Risk Factor: Medium

Base Score: 5.9

Temporal Score: 4.4

Vector: CVSS2#AV:L/AC:L/Au:M/C:C/I:N/A:C

CVSS Score Source: CVE-2023-52481

CVSS v3

Risk Factor: Medium

Base Score: 4.7

Temporal Score: 4.1

Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 10/30/2023

Reference Information

CVE: CVE-2023-52481

Detections

Analytics