Google: sys-kernel/lakitu-kernel-6_1: security update to 18244.236.35

high Tenable Self-Hosted Container Security Plugin ID 450799

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: net/sched: stop
qdisc_tree_reduce_backlog on TC_H_ROOT In qdisc_tree_reduce_backlog, Qdiscs with major handle ffff: are
assumed to be either root or ingress. This assumption is bogus since it's valid to create egress qdiscs
with major handle ffff: Budimir Markovic found that for qdiscs like DRR that maintain an active class
list, it will cause a UAF with a dangling class pointer. In 066a3b5b2346, the concern was to avoid
iterating over the ingress qdisc since its parent is itself. The proper fix is to stop when parent
TC_H_ROOT is reached because the only way to retrieve ingress is when a hierarchy which does not contain a
ffff: major handle call into qdisc_lookup with TC_H_MAJ(TC_H_ROOT). In the scenario where major ffff: is
an egress qdisc in any of the tree levels, the updates will also propagate to TC_H_ROOT, which then the
iteration must stop. net/sched/sch_api.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
(CVE-2024-53057)

Solution

Update the sys-kernel/lakitu-kernel-6_1 library and its related packages to version 18244.236.35 or later.

Plugin Details

Severity: High

ID: 450799

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/1/2026

Updated: 10/1/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.12

Vendor

Vendor Severity: HIGH

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2024-53057

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 12/12/2023

Reference Information

CVE: CVE-2024-53057

Detections

Analytics