Echo: linux: security update to 6.1.177-1

medium Tenable Self-Hosted Container Security Plugin ID 457207

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix locking in
regulator_resolve_supply() error path If late enabling of a supply regulator fails in
regulator_resolve_supply(), the code currently triggers a lockdep warning: WARNING:
drivers/regulator/core.c:2649 at _regulator_put+0x80/0xa0, CPU#6: kworker/u32:4/596 ... Call trace:
_regulator_put+0x80/0xa0 (P) regulator_resolve_supply+0x7cc/0xbe0
regulator_register_resolve_supply+0x28/0xb8 as the regulator_list_mutex must be held when calling
_regulator_put(). To solve this, simply switch to using regulator_put(). While at it, we should also make
sure that no concurrent access happens to our rdev while we clear out the supply pointer. Add appropriate
locking to ensure that. While the code in question will be removed altogether in a follow-up commit, I
believe it is still beneficial to have this corrected before removal for future reference.
(CVE-2026-46252)

Solution

Update the linux library and its related packages to version 6.1.177-1 or later.

Plugin Details

Severity: Medium

ID: 457207

Version: Revision 1.1

Type: Local

Family: Echo Local Security Checks

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.75

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2026-46252

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 6/4/2026

Vulnerability Publication Date: 6/3/2026

Reference Information

CVE: CVE-2026-46252

Detections

Analytics