Detections
Analytics

Echo: linux: security update to 6.1.180-1

high Tenable Self-Hosted Container Security Plugin ID 461614

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F3A
 keymap to the GPIO count rmi_f3a_initialize() takes the GPIO count from the device query register
 (f3a->gpio_count = buf & RMI_F3A_GPIO_COUNT, range 0..127). rmi_f3a_map_gpios() then allocates
 gpio_key_map with min(gpio_count, TRACKSTICK_RANGE_END) == at most 6 entries, but rmi_f3a_attention()
 iterates the full gpio_count and dereferences gpio_key_map[i], and input->keycodemax is set to the full
 gpio_count while input->keycode points at the 6-entry allocation. A device that reports gpio_count > 6
 therefore causes an out-of-bounds read of gpio_key_map[] on every attention interrupt, and out-of-bounds
 accesses through the input core's default keymap ioctls: EVIOCGKEYCODE reads past the buffer (leaking
 adjacent slab memory to user space) and EVIOCSKEYCODE writes a caller-controlled value past it, for any
 process able to open the evdev node, since input_default_getkeycode() and input_default_setkeycode() only
 bound the index against keycodemax. Size the keymap for the full gpio_count. The mapping loop is
 unchanged: it still assigns only the first min(gpio_count, TRACKSTICK_RANGE_END) entries; the remaining
 slots stay KEY_RESERVED (devm_kcalloc zero-fills) and are skipped when reporting. (CVE-2026-64277)

Solution

Update the linux library and its related packages to version 6.1.180-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-64277

Plugin Details

Severity: High

ID: 461614

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.27

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-64277

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 7/26/2026

Vulnerability Publication Date: 7/23/2026

Reference Information

CVE: CVE-2026-64277