Detections
Analytics

Echo: linux: security update to 6.12.96-1

high Tenable Self-Hosted Container Security Plugin ID 457300

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect service table
 iterations with service_lock The service_table list is protected by service_lock when entries are added or
 removed (in adf_service_add() and adf_service_remove()), but several functions iterate over the list
 without holding this lock. A concurrent adf_service_register() or adf_service_unregister() call could
 modify the list during traversal, leading to list corruption or a use-after-free. Fix this by holding
 service_lock across all list_for_each_entry() iterations of service_table in adf_dev_init(),
 adf_dev_start(), adf_dev_stop(), adf_dev_shutdown(), adf_dev_restarting_notify(),
 adf_dev_restarted_notify(), and adf_error_notifier(). The lock ordering is safe: callers of the static
 helpers (adf_dev_up() and adf_dev_down()) acquire state_lock before service_lock, and no event_hld
 callback or service_lock holder ever acquires state_lock in the reverse order. (CVE-2026-64305)

Solution

Update the linux library and its related packages to version 6.12.96-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-64305

Plugin Details

Severity: High

ID: 457300

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 6.9

Percentile: 96.5

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-64305

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 7/26/2026

Vulnerability Publication Date: 7/23/2026

Reference Information

CVE: CVE-2026-64305