Detections
Analytics

Echo: linux: security update to 6.7.7-1

medium Tenable Self-Hosted Container Security Plugin ID 458675

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Refactor DMCUB
 enter/exit idle interface [Why] We can hang in place trying to send commands when the DMCUB isn't powered
 on. [How] We need to exit out of the idle state prior to sending a command, but the process that performs
 the exit also invokes a command itself. Fixing this issue involves the following: 1. Using a software
 state to track whether or not we need to start the process to exit idle or notify idle. It's possible for
 the hardware to have exited an idle state without driver knowledge, but entering one is always restricted
 to a driver allow - which makes the SW state vs HW state mismatch issue purely one of optimization, which
 should seldomly be hit, if at all. 2. Refactor any instances of exit/notify idle to use a single wrapper
 that maintains this SW state. This works simialr to dc_allow_idle_optimizations, but works at the DMCUB
 level and makes sure the state is marked prior to any notify/exit idle so we don't enter an infinite loop.
 3. Make sure we exit out of idle prior to sending any commands or waiting for DMCUB idle. This patch takes
 care of 1/2. A future patch will take care of wrapping DMCUB command submission with calls to this new
 interface. (CVE-2023-52625)

Solution

Update the linux library and its related packages to version 6.7.7-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2023-52625

Plugin Details

Severity: Medium

ID: 458675

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2023-52625

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 9/15/2025

Vulnerability Publication Date: 3/26/2024

Reference Information

CVE: CVE-2023-52625