Detections
Analytics

Echo: linux: security update to 6.1.133-1

medium Tenable Self-Hosted Container Security Plugin ID 458023

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: nilfs2: handle errors that
 nilfs_prepare_chunk() may return Patch series "nilfs2: fix issues with rename operations". This series
 fixes BUG_ON check failures reported by syzbot around rename operations, and a minor behavioral issue
 where the mtime of a child directory changes when it is renamed instead of moved. This patch (of 2): The
 directory manipulation routines nilfs_set_link() and nilfs_delete_entry() rewrite the directory entry in
 the folio/page previously read by nilfs_find_entry(), so error handling is omitted on the assumption that
 nilfs_prepare_chunk(), which prepares the buffer for rewriting, will always succeed for these. And if an
 error is returned, it triggers the legacy BUG_ON() checks in each routine. This assumption is wrong, as
 proven by syzbot: the buffer layer called by nilfs_prepare_chunk() may call nilfs_get_block() if
 necessary, which may fail due to metadata corruption or other reasons. This has been there all along, but
 improved sanity checks and error handling may have made it more reproducible in fuzzing tests. Fix this
 issue by adding missing error paths in nilfs_set_link(), nilfs_delete_entry(), and their caller
 nilfs_rename(). (CVE-2025-21721)

Solution

Update the linux library and its related packages to version 6.1.133-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2025-21721

Plugin Details

Severity: Medium

ID: 458023

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.26

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2025-21721

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 1/28/2026

Vulnerability Publication Date: 2/27/2025

Reference Information

CVE: CVE-2025-21721