Echo: linux: security update to 6.1.140-1

high Tenable Self-Hosted Container Security Plugin ID 465506

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm
noticed that on parisc a SIGFPE exception will crash an application with a second SIGFPE in the signal
handler. Dave analyzed it, and it happens because glibc uses a double-word floating-point store to
atomically update function descriptors. As a result of lazy binding, we hit a floating-point store in
fpe_func almost immediately. When the T bit is set, an assist exception trap occurs when when the co-
processor encounters *any* floating-point instruction except for a double store of register %fr0. The
latter cancels all pending traps. Let's fix this by clearing the Trap (T) bit in the FP status register
before returning to the signal handler in userspace. The issue can be reproduced with this test program:
root@parisc:~# cat fpe.c static void fpe_func(int sig, siginfo_t *i, void *v) { sigset_t set;
sigemptyset(&set); sigaddset(&set, SIGFPE); sigprocmask(SIG_UNBLOCK, &set, NULL); printf("GOT signal %d
with si_code %ld\n", sig, i->si_code); } int main() { struct sigaction action = { .sa_sigaction =
fpe_func, .sa_flags = SA_RESTART|SA_SIGINFO }; sigaction(SIGFPE, &action, 0); feenableexcept(FE_OVERFLOW);
return printf("%lf\n",1.7976931348623158E308*1.7976931348623158E308); } root@parisc:~# gcc fpe.c -lm
root@parisc:~# ./a.out Floating point exception root@parisc:~# strace -f ./a.out execve("./a.out",
["./a.out"], 0xf9ac7034 /* 20 vars */) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024,
rlim_max=RLIM_INFINITY}) = 0 ... rt_sigaction(SIGFPE, {sa_handler=0x1110a, sa_mask=[],
sa_flags=SA_RESTART|SA_SIGINFO}, NULL, 8) = 0 --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF,
si_addr=0x1078f} --- --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF, si_addr=0xf8f21237} --- +++ killed
by SIGFPE +++ Floating point exception (CVE-2025-37991)

Solution

Update the linux library and its related packages to version 6.1.140-1 or later.

Plugin Details

Severity: High

ID: 465506

Version: Revision 1.1

Type: Local

Family: Echo Local Security Checks

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: High

Score: 7.6

Percentile: 98.59

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2025-37991

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 9/15/2025

Vulnerability Publication Date: 5/13/2025

Reference Information

CVE: CVE-2025-37991

Detections

Analytics