Google: sys-kernel/lakitu-kernel-5_15, sys-kernel/lakitu-kernel-6_1: security update to 17800.436.4

medium Tenable Self-Hosted Container Security Plugin ID 452517

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: virtio-blk: don't keep queue frozen
during system suspend Commit 4ce6e2db00de ("virtio-blk: Ensure no requests in virtqueues before deleting
vqs.") replaces queue quiesce with queue freeze in virtio-blk's PM callbacks. And the motivation is to
drain inflight IOs before suspending. block layer's queue freeze looks very handy, but it is also easy to
cause deadlock, such as, any attempt to call into bio_queue_enter() may run into deadlock if the queue is
frozen in current context. There are all kinds of ->suspend() called in suspend context, so keeping queue
frozen in the whole suspend context isn't one good idea. And Marek reported lockdep warning[1] caused by
virtio-blk's freeze queue in virtblk_freeze(). [1] https://lore.kernel.org/linux-
block/[email protected]/ Given the motivation is to drain in-flight IOs, it
can be done by calling freeze & unfreeze, meantime restore to previous behavior by keeping queue quiesced
during suspend. (CVE-2024-57946)

Solution

Update the sys-kernel/lakitu-kernel-5_15 library and its related packages to version 17800.436.4 or later.

Plugin Details

Severity: Medium

ID: 452517

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/1/2026

Updated: 10/1/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

Vendor

Vendor Severity: MEDIUM

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2024-57946

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 1/16/2025

Reference Information

CVE: CVE-2024-57946

Detections

Analytics