Detections
Analytics

Echo: linux: security update to 6.1.137-1

medium Tenable Self-Hosted Container Security Plugin ID 465725

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Fix Kernel
 panic during IRQ handler registration Resolve kernel panic while accessing IRQ handler associated with the
 generated IRQ. This is done by acquiring the spinlock and storing the current interrupt state before
 handling the interrupt request using generic_handle_irq. A previous fix patch was submitted where
 'generic_handle_irq' was replaced with 'handle_nested_irq'. However, this change also causes the kernel
 panic where after determining which GPIO triggered the interrupt and attempting to call handle_nested_irq
 with the mapped IRQ number, leads to a failure in locating the registered handler. (CVE-2025-37815)

Solution

Update the linux library and its related packages to version 6.1.137-1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2025-37815

Plugin Details

Severity: Medium

ID: 465725

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2025-37815

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 9/15/2025

Vulnerability Publication Date: 5/8/2025

Reference Information

CVE: CVE-2025-37815