Detections
Analytics

Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_6, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_6, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_6, sys-kernel/lakitu-vgpu-kernel-6_6: security update to 19216.655.6

high Tenable Self-Hosted Container Security Plugin ID 468675

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update
 comments from kernel-side hash adds mtype_resize() copies comment pointers with memcpy(), not the comment
 objects themselves. During the window after an entry has been copied but before the table swap and backlog
 replay, the old table is still published for packet-side updates while the replacement-table entry already
 holds the same ip_set_comment_rcu pointer. If xt_SET --add-set ... --exist hits that old entry in this
 window, mtype_add() calls ip_set_init_comment() even though packet-side adds carry no comment payload.
 That call frees the shared comment through the old entry, so the replacement-table entry now holds a stale
 pointer. When the queued add is replayed on the new table, mtype_add() calls ip_set_init_comment() again
 and strlen() dereferences the stale pointer. Fix this in mtype_add() by skipping ip_set_init_comment()
 when ext->target marks a packet-side add. Userspace adds still update comments, while packet-side adds can
 no longer free comment storage shared with a resize copy. (CVE-2026-74492)

Solution

Update the sys-kernel/cchost-kernel-6_12 library and its related packages to version 19216.655.6 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-125.oval.xml.tar.gz

Plugin Details

Severity: High

ID: 468675

Version: Revision 1.5

Type: Local

Published: 10/3/2026

Updated: 10/6/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.18

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-74492

CVSS v3

Risk Factor: High

Base Score: 8.4

Temporal Score: 7.3

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 8/11/2026

Reference Information

CVE: CVE-2026-74492