Detections
Analytics

Echo: linux: security update to 6.1.147-1

high Tenable Self-Hosted Container Security Plugin ID 457430

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for bcm_op
 runtime updates The CAN broadcast manager (CAN BCM) can send a sequence of CAN frames via hrtimer. The
 content and also the length of the sequence can be changed resp reduced at runtime where the 'currframe'
 counter is then set to zero. Although this appeared to be a safe operation the updates of 'currframe' can
 be triggered from user space and hrtimer context in bcm_can_tx(). Anderson Nascimento created a proof of
 concept that triggered a KASAN slab-out-of-bounds read access which can be prevented with a spin_lock_bh.
 At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this
 variable can be modified from both contexts too. (CVE-2025-38004)

Solution

Update the linux library and its related packages to version 6.1.147-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2025-38004

Plugin Details

Severity: High

ID: 457430

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.3

Percentile: 53.04

CVSS v2

Risk Factor: Medium

Base Score: 6.2

Temporal Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C

CVSS Score Source: CVE-2025-38004

CVSS v3

Risk Factor: High

Base Score: 7.1

Temporal Score: 6.2

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 9/15/2025

Vulnerability Publication Date: 6/8/2025

Reference Information

CVE: CVE-2025-38004