Detections
Analytics

Echo: linux: security update to 6.1.176-1

high Tenable Self-Hosted Container Security Plugin ID 461524

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: drm/komeda: fix integer overflow in
 AFBC framebuffer size check The AFBC framebuffer size validation calculates the minimum required buffer
 size by adding the AFBC payload size to the framebuffer offset. This addition is performed without
 checking for integer overflow. If the addition oveflows, the size check may incorrectly succed and allow
 userspace to provide an undersized drm_gem_object, potentially leading to out-of-bounds memory access. Add
 usage of check_add_overflow() to safely compute the minimum required size and reject the framebuffer if an
 overflow is detected. This makes the AFBC size validation more robust against malformed. Found by Linux
 Verification Center (linuxtesting.org) with SVACE. (CVE-2026-53068)

Solution

Update the linux library and its related packages to version 6.1.176-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-53068

Plugin Details

Severity: High

ID: 461524

Version: Revision 1.2

Type: Local

Published: 10/2/2026

Updated: 10/5/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.3

Percentile: 53.64

CVSS v2

Risk Factor: Medium

Base Score: 6.2

Temporal Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C

CVSS Score Source: CVE-2026-53068

CVSS v3

Risk Factor: High

Base Score: 7.1

Temporal Score: 6.2

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 6/25/2026

Vulnerability Publication Date: 6/3/2026

Reference Information

CVE: CVE-2026-53068