Detections
Analytics

Echo: linux: security update to 6.1.153-1

medium Tenable Self-Hosted Container Security Plugin ID 459452

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup in
 __kmemleak_do_cleanup() A soft lockup warning was observed on a relative small system x86-64 system with
 16 GB of memory when running a debug kernel with kmemleak enabled. watchdog: BUG: soft lockup - CPU#8
 stuck for 33s! [kworker/8:1:134] The test system was running a workload with hot unplug happening in
 parallel. Then kemleak decided to disable itself due to its inability to allocate more kmemleak objects.
 The debug kernel has its CONFIG_DEBUG_KMEMLEAK_MEM_POOL_SIZE set to 40,000. The soft lockup happened in
 kmemleak_do_cleanup() when the existing kmemleak objects were being removed and deleted one-by-one in a
 loop via a workqueue. In this particular case, there are at least 40,000 objects that need to be processed
 and given the slowness of a debug kernel and the fact that a raw_spinlock has to be acquired and released
 in __delete_object(), it could take a while to properly handle all these objects. As kmemleak has been
 disabled in this case, the object removal and deletion process can be further optimized as locking isn't
 really needed. However, it is probably not worth the effort to optimize for such an edge case that should
 rarely happen. So the simple solution is to call cond_resched() at periodic interval in the iteration loop
 to avoid soft lockup. (CVE-2025-39737)

Solution

Update the linux library and its related packages to version 6.1.153-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2025-39737

Plugin Details

Severity: Medium

ID: 459452

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.62

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2025-39737

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 9/15/2025

Vulnerability Publication Date: 9/4/2025

Reference Information

CVE: CVE-2025-39737