Detections
Analytics

Echo: linux: security update to 6.1.176-1

high Tenable Self-Hosted Container Security Plugin ID 463584

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packets with
 small MSS Some physical adapters on Power systems do not support segmentation offload when the MSS is less
 than 224 bytes. Attempting to send such packets causes the adapter to freeze, stopping all traffic until
 manually reset. Implement ndo_features_check to disable GSO for packets with small MSS values. The network
 stack will perform software segmentation instead. The 224-byte minimum matches ibmvnic commit
 <f10b09ef687f> ("ibmvnic: Enforce stronger sanity checks on GSO packets") which uses the same physical
 adapters in SEA configurations. The issue occurs specifically when the hardware attempts to perform
 segmentation (gso_segs > 1) with a small MSS. Single-segment GSO packets (gso_segs == 1) do not trigger
 the problematic LSO code path and are transmitted normally without segmentation. Add an ndo_features_check
 callback to disable GSO when MSS < 224 bytes. Also call vlan_features_check() to ensure proper handling of
 VLAN packets, particularly QinQ (802.1ad) configurations where the hardware parser may not support certain
 offload features. Validated using iptables to force small MSS values. Without the fix, the adapter
 freezes. With the fix, packets are segmented in software and transmission succeeds. Comprehensive
 regression testing completedd (MSS tests, performance, stability). (CVE-2026-46273)

Solution

Update the linux library and its related packages to version 6.1.176-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-46273

Plugin Details

Severity: High

ID: 463584

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Low

Score: 3.3

Percentile: 51.2

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2026-46273

CVSS v3

Risk Factor: High

Base Score: 8.6

Temporal Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 6/4/2026

Vulnerability Publication Date: 6/3/2026

Reference Information

CVE: CVE-2026-46273