Detections
Analytics

Echo: linux: security update to 6.1.164-1

medium Tenable Self-Hosted Container Security Plugin ID 464236

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AF_XDP
 generic RX path Move rx_lock from xsk_socket to xsk_buff_pool. Fix synchronization for shared umem mode in
 generic RX path where multiple sockets share single xsk_buff_pool. RX queue is exclusive to xsk_socket,
 while FILL queue can be shared between multiple sockets. This could result in race condition where two CPU
 cores access RX path of two different sockets sharing the same umem. Protect both queues by acquiring
 spinlock in shared xsk_buff_pool. Lock contention may be minimized in the future by some per-thread FQ
 buffering. It's safe and necessary to move spin_lock_bh(rx_lock) after xsk_rcv_check(): * xs->pool and
 spinlock_init is synchronized by xsk_bind() -> xsk_is_bound() memory barriers. * xsk_rcv_check() may
 return true at the moment of xsk_release() or xsk_unbind_dev(), however this will not cause any data races
 or race conditions. xsk_unbind_dev() removes xdp socket from all maps and waits for completion of all
 outstanding rx operations. Packets in RX path will either complete safely or drop. (CVE-2025-37920)

Solution

Update the linux library and its related packages to version 6.1.164-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2025-37920

Plugin Details

Severity: Medium

ID: 464236

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.24

CVSS v2

Risk Factor: Low

Base Score: 3.8

Temporal Score: 2.8

Vector: CVSS2#AV:L/AC:H/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2025-37920

CVSS v3

Risk Factor: Medium

Base Score: 4.7

Temporal Score: 4.1

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 9/15/2025

Vulnerability Publication Date: 5/20/2025

Reference Information

CVE: CVE-2025-37920