Detections
Analytics

Google: sys-kernel/lakitu-kernel-6_1: security update to 17872.0.0

medium Tenable Self-Hosted Container Security Plugin ID 451572

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: fs: Protect reconfiguration of sb
 read-write from racing writes The reconfigure / remount code takes a lot of effort to protect filesystem's
 reconfiguration code from racing writes on remounting read-only. However during remounting read-only
 filesystem to read-write mode userspace writes can start immediately once we clear SB_RDONLY flag. This is
 inconvenient for example for ext4 because we need to do some writes to the filesystem (such as preparation
 of quota files) before we can take userspace writes so we are clearing SB_RDONLY flag before we are fully
 ready to accept userpace writes and syzbot has found a way to exploit this [1]. Also as far as I'm reading
 the code the filesystem remount code was protected from racing writes in the legacy mount path by the
 mount's MNT_READONLY flag so this is relatively new problem. It is actually fairly easy to protect remount
 read-write from racing writes using sb->s_readonly_remount flag so let's just do that instead of having to
 workaround these races in the filesystem code. [1]
 https://lore.kernel.org/all/[email protected]/T/ (CVE-2023-54099)

Solution

Update the sys-kernel/lakitu-kernel-6_1 library and its related packages to version 17872.0.0 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-113.oval.xml.tar.gz

Plugin Details

Severity: Medium

ID: 451572

Version: Revision 1.1

Type: Local

Published: 10/1/2026

Updated: 10/1/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.42

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2023-54099

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 7/21/2021

Reference Information

CVE: CVE-2023-54099