Google: sys-kernel/csql-kernel-6_1, sys-kernel/csql-kernel-6_6, sys-kernel/lakitu-kernel-6_1, sys-kernel/lakitu-kernel-6_6, sys-kernel/lakitu-nc-kernel-6_6, sys-kernel/lakitu-vgpu-kernel-6_6, sys-kernel/tpusev-kernel-6_6: security update to 18613.731.2

high Tenable Self-Hosted Container Security Plugin ID 465949

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: restore write access when
removing an entry Registering an entry with the MISC_FMT_OPEN_FILE flag opens the interpreter via
open_exec() which denies write access to it for as long as the entry exists. Removing the entry closes the
interpreter file via filp_close() but never restores write access, leaving the inode's i_writecount
permanently negative. Opening the interpreter for writing keeps failing with ETXTBSY long after the entry
is gone until the inode is evicted from the inode cache. Commit 90f601b497d7 ("binfmt_misc: restore write
access before closing files opened by open_exec()") fixed the same imbalance in the error path of
bm_register_write() but the actual removal path has been leaking the write denial since the introduction
of the flag. Restore write access in put_binfmt_handler() before closing the interpreter file.
(CVE-2026-74487)

Solution

Update the sys-kernel/csql-kernel-6_1 library and its related packages to version 18613.731.2 or later.

Plugin Details

Severity: High

ID: 465949

Version: Revision 1.2

Type: Local

Family: Google COS Security Checks

Published: 10/2/2026

Updated: 10/3/2026

Risk Information

VPR

Risk Factor: Medium

Score: 6.3

Percentile: 96.31

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-74487

CVSS v3

Risk Factor: High

Base Score: 7.1

Temporal Score: 6.2

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 8/15/2026

Reference Information

CVE: CVE-2026-74487

Detections

Analytics