Detections
Analytics

Echo: linux: security update to 6.9.7-1

medium Tenable Self-Hosted Container Security Plugin ID 460423

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: i2c: lpi2c: Avoid calling clk_get_rate
 during transfer Instead of repeatedly calling clk_get_rate for each transfer, lock the clock rate and
 cache the value. A deadlock has been observed while adding tlv320aic32x4 audio codec to the system. When
 this clock provider adds its clock, the clk mutex is locked already, it needs to access i2c, which in
 return needs the mutex for clk_get_rate as well. (CVE-2024-40965)

Solution

Update the linux library and its related packages to version 6.9.7-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2024-40965

Plugin Details

Severity: Medium

ID: 460423

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2024-40965

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 9/15/2025

Vulnerability Publication Date: 7/12/2024

Reference Information

CVE: CVE-2024-40965