Detections
Analytics

Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_12: security update to 19216.700.7

high Tenable Self-Hosted Container Security Plugin ID 468599

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before
 tearing down copied context entry copied_context_tear_down() zeroes the 128-bit context entry with
 context_clear_entry() while the Present bit is still set, and only then issues the context-cache and IOTLB
 invalidations. This leaves a window in which hardware can fetch a torn entry, with some fields already
 zeroed while Present is still set, leading to unpredictable behaviour or spurious faults. While x86
 provides strong write ordering, the compiler may reorder the writes to the two 64-bit halves of the entry,
 and the hardware fetch is not guaranteed to be atomic with respect to multiple CPU writes. There is no
 cacheline flush before the invalidation either, so on an IOMMU without coherent access to the context
 table the zeroed entry may not be visible to hardware at the point the invalidation is submitted. Apply
 the same ownership handshake described in the VT-d spec, Section 6.5.3.3 ("Guidance to Software for
 Invalidations"): clear only the Present bit, flush it out to the IOMMU, perform the invalidations, and
 only then zero the remainder of the entry. (CVE-2026-90243)

Solution

Update the sys-kernel/cchost-kernel-6_12 library and its related packages to version 19216.700.7 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-125.oval.xml.tar.gz

Plugin Details

Severity: High

ID: 468599

Version: Revision 1.6

Type: Local

Published: 10/3/2026

Updated: 10/6/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 5

Percentile: 93.3

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 6.2

Temporal Score: 4.6

Vector: CVSS2#AV:L/AC:H/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-90243

CVSS v3

Risk Factor: High

Base Score: 8.1

Temporal Score: 7.1

Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 9/17/2026

Reference Information

CVE: CVE-2026-90243