Detections
Analytics

Echo: linux: security update to 6.12.13-1

high Tenable Self-Hosted Container Security Plugin ID 465653

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: xfrm: state: fix out-of-bounds read
 during lookup lookup and resize can run in parallel. The xfrm_state_hash_generation seqlock ensures a
 retry, but the hash functions can observe a hmask value that is too large for the new hlist array. rehash
 does: rcu_assign_pointer(net->xfrm.state_bydst, ndst) [..] net->xfrm.state_hmask = nhashmask; While state
 lookup does: h = xfrm_dst_hash(net, daddr, saddr, tmpl->reqid, encap_family); hlist_for_each_entry_rcu(x,
 net->xfrm.state_bydst + h, bydst) { This is only safe in case the update to state_bydst is larger than
 net->xfrm.xfrm_state_hmask (or if the lookup function gets serialized via state spinlock again). Fix this
 by prefetching state_hmask and the associated pointers. The xfrm_state_hash_generation seqlock retry will
 ensure that the pointer and the hmask will be consistent. The existing helpers, like xfrm_dst_hash(), are
 now unsafe for RCU side, add lockdep assertions to document that they are only safe for insert side.
 xfrm_state_lookup_byaddr() uses the spinlock rather than RCU. AFAICS this is an oversight from back when
 state lookup was converted to RCU, this lock should be replaced with RCU in a future patch.
 (CVE-2024-57982)

Solution

Update the linux library and its related packages to version 6.12.13-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2024-57982

Plugin Details

Severity: High

ID: 465653

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 6.3

Percentile: 97.25

CVSS v2

Risk Factor: Medium

Base Score: 6.2

Temporal Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C

CVSS Score Source: CVE-2024-57982

CVSS v3

Risk Factor: High

Base Score: 7.1

Temporal Score: 6.2

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 9/15/2025

Vulnerability Publication Date: 2/27/2025

Reference Information

CVE: CVE-2024-57982