Google: sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_6: security update to 19216.104.72

high Tenable Self-Hosted Container Security Plugin ID 467995

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore signal/timeout on
connect() if already established During connect(), acting on a signal/timeout by disconnecting an already
established socket leads to several issues: 1. connect() invoking vsock_transport_cancel_pkt() ->
virtio_transport_purge_skbs() may race with sendmsg() invoking virtio_transport_get_credit(). This results
in a permanently elevated `vvs->bytes_unsent`. Which, in turn, confuses the SOCK_LINGER handling. 2.
connect() resetting a connected socket's state may race with socket being placed in a sockmap. A
disconnected socket remaining in a sockmap breaks sockmap's assumptions. And gives rise to WARNs. 3.
connect() transitioning SS_CONNECTED -> SS_UNCONNECTED allows for a transport change/drop after
TCP_ESTABLISHED. Which poses a problem for any simultaneous sendmsg() or connect() and may result in a
use-after-free/null-ptr-deref. Do not disconnect socket on signal/timeout. Keep the logic for unconnected
sockets: they don't linger, can't be placed in a sockmap, are rejected by sendmsg(). [1]:
https://lore.kernel.org/netdev/[email protected]/ [2]:
https://lore.kernel.org/netdev/[email protected]/ [3]:
https://lore.kernel.org/netdev/[email protected]/ (CVE-2025-40248)

Solution

Update the sys-kernel/csql-kernel-6_12 library and its related packages to version 19216.104.72 or later.

Plugin Details

Severity: High

ID: 467995

Version: Revision 1.2

Type: Local

Family: Google COS Security Checks

Published: 10/3/2026

Updated: 10/3/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 6.9

Percentile: 97.17

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2025-40248

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 12/4/2025

Reference Information

CVE: CVE-2025-40248

Detections

Analytics