Detections
Analytics

Echo: linux: security update to 6.1.180-1

high Tenable Self-Hosted Container Security Plugin ID 461253

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: partitions: aix: bound the pp_count
 scan to the ppe array aix_partition() reads the physical volume descriptor into a fixed-size struct pvd
 and then scans its physical-partition-extent array: int numpps = be16_to_cpu(pvd->pp_count); ... for (i =
 0; i < numpps; i += 1) { struct ppe *p = pvd->ppe + i; ... lp_ix = be16_to_cpu(p->lp_ix); pvd points at a
 single kmalloc()'d struct pvd whose ppe[] member holds a fixed ARRAY_SIZE(pvd->ppe) (1016) entries, but
 the loop runs up to the on-disk pp_count. pp_count is an unvalidated __be16 read straight from the
 descriptor, so a crafted AIX image with pp_count larger than 1016 drives the loop to read pvd->ppe[i] past
 the end of the allocation (up to 65535 entries, ~2 MB out of bounds). The partition scan runs without
 mounting anything, when a block device with a crafted AIX/IBM partition table appears (an attacker-
 supplied image attached with losetup -P, or a device auto-scanned by udev), via msdos_partition() ->
 aix_partition(). Clamp the scan to the number of entries the ppe[] array can hold. (CVE-2026-64318)

Solution

Update the linux library and its related packages to version 6.1.180-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-64318

Plugin Details

Severity: High

ID: 461253

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.3

Percentile: 53.46

CVSS v2

Risk Factor: Medium

Base Score: 6.2

Temporal Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C

CVSS Score Source: CVE-2026-64318

CVSS v3

Risk Factor: High

Base Score: 7.1

Temporal Score: 6.2

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 7/26/2026

Vulnerability Publication Date: 7/23/2026

Reference Information

CVE: CVE-2026-64318