Detections
Analytics

Echo: linux: security update to 6.1.162-1

high Tenable Self-Hosted Container Security Plugin ID 459240

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: powerpc/64s/slb: Fix SLB multihit
 issue during SLB preload On systems using the hash MMU, there is a software SLB preload cache that mirrors
 the entries loaded into the hardware SLB buffer. This preload cache is subject to periodic eviction —
 typically after every 256 context switches — to remove old entry. To optimize performance, the kernel
 skips switch_mmu_context() in switch_mm_irqs_off() when the prev and next mm_struct are the same. However,
 on hash MMU systems, this can lead to inconsistencies between the hardware SLB and the software preload
 cache. If an SLB entry for a process is evicted from the software cache on one CPU, and the same process
 later runs on another CPU without executing switch_mmu_context(), the hardware SLB may retain stale
 entries. If the kernel then attempts to reload that entry, it can trigger an SLB multi-hit error. The
 following timeline shows how stale SLB entries are created and can cause a multi-hit error when a process
 moves between CPUs without a MMU context switch. CPU 0 CPU 1 ----- ----- Process P exec swapper/1
 load_elf_binary begin_new_exc activate_mm switch_mm_irqs_off switch_mmu_context switch_slb /* * This
 invalidates all * the entries in the HW * and setup the new HW * SLB entries as per the * preload cache.
 */ context_switch sched_migrate_task migrates process P to cpu-1 Process swapper/0 context switch (to
 process P) (uses mm_struct of Process P) switch_mm_irqs_off() switch_slb load_slb++ /* * load_slb becomes
 0 here * and we evict an entry from * the preload cache with * preload_age(). We still * keep HW SLB and
 preload * cache in sync, that is * because all HW SLB entries * anyways gets evicted in * switch_slb
 during SLBIA. * We then only add those * entries back in HW SLB, * which are currently * present in
 preload_cache * (after eviction). */ load_elf_binary continues... setup_new_exec() slb_setup_new_exec()
 sched_switch event sched_migrate_task migrates process P to cpu-0 context_switch from swapper/0 to Process
 P switch_mm_irqs_off() /* * Since both prev and next mm struct are same we don't call *
 switch_mmu_context(). This will cause the HW SLB and SW preload * cache to go out of sync in
 preload_new_slb_context. Because there * was an SLB entry which was evicted from both HW and preload cache
 * on cpu-1. Now later in preload_new_slb_context(), when we will try * to add the same preload entry
 again, we will add this to the SW * preload cache and then will add it to the HW SLB. Since on cpu-0 *
 this entry was never invalidated, hence adding this entry to the HW * SLB will cause a SLB multi-hit
 error. */ load_elf_binary cont ---truncated--- (CVE-2025-71078)

Solution

Update the linux library and its related packages to version 6.1.162-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2025-71078

Plugin Details

Severity: High

ID: 459240

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.44

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2025-71078

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 1/14/2026

Vulnerability Publication Date: 1/13/2026

Reference Information

CVE: CVE-2025-71078