Detections
Analytics

Google: sys-kernel/lakitu-kernel-5_10: security update to 17033.0.0

medium Tenable Self-Hosted Container Security Plugin ID 452119

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: net: Make
 tcp_allowed_congestion_control readonly in non-init netns Currently, tcp_allowed_congestion_control is
 global and writable; writing to it in any net namespace will leak into all other net namespaces.
 tcp_available_congestion_control and tcp_allowed_congestion_control are the only sysctls in ipv4_net_table
 (the per-netns sysctl table) with a NULL data pointer; their handlers
 (proc_tcp_available_congestion_control and proc_allowed_congestion_control) have no other way of
 referencing a struct net. Thus, they operate globally. Because ipv4_net_table does not use designated
 initializers, there is no easy way to fix up this one "bad" table entry. However, the data pointer
 updating logic shouldn't be applied to NULL pointers anyway, so we instead force these entries to be read-
 only. These sysctls used to exist in ipv4_table (init-net only), but they were moved to the per-net
 ipv4_net_table, presumably without realizing that tcp_allowed_congestion_control was writable and thus
 introduced a leak. Because the intent of that commit was only to know (i.e. read) "which congestion
 algorithms are available or allowed", this read-only solution should be sufficient. The logic added in
 recent commit 31c4d2f160eb: ("net: Ensure net namespace isolation of sysctls") does not and cannot check
 for NULL data pointers, because other table entries (e.g. /proc/sys/net/netfilter/nf_log/) have .data=NULL
 but use other methods (.extra2) to access the struct net. (CVE-2021-46912)

Solution

Update the sys-kernel/lakitu-kernel-5_10 library and its related packages to version 17033.0.0 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-101.oval.xml.tar.gz

Plugin Details

Severity: Medium

ID: 452119

Version: Revision 1.1

Type: Local

Published: 10/1/2026

Updated: 10/1/2026

Risk Information

VPR

Risk Factor: Medium

Score: 5

Percentile: 95.09

Vendor

Vendor Severity: MEDIUM

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2021-46912

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 1/20/2022

Reference Information

CVE: CVE-2021-46912