Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_12: security update to 19506.448.36

high Tenable Self-Hosted Container Security Plugin ID 468902

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: keep port count
until LUN teardown completes tcm_usbg_drop_nexus() permits session removal once tpg_port_count reaches
zero. However, usbg_port_unlink() currently decrements that count from the fabric_pre_unlink() callback,
before core_dev_del_lun() waits for active se_lun references to drain. If removal of the last LUN races a
nexus removal, the latter can observe a zero port count and call target_remove_session(). This frees
sess_cmd_map while an in-flight struct usbg_cmd, including its work item, can still be accessed.
Overlapping the last-LUN unlink with nexus removal reproduces this lifetime violation as a DEBUG_OBJECTS
"free active" warning for usbg_cmd_work, followed by a target-core BUG/Oops. The generic target-core
unlink path has no callback after core_dev_del_lun() completes. Add an optional fabric_post_unlink()
callback and use it for the f_tcm port count. The count now remains nonzero until core_dev_del_lun() has
finished draining active LUN references, preventing nexus removal from freeing the session during command
completion. (CVE-2026-80854)

Solution

Update the sys-kernel/cchost-kernel-6_12 library and its related packages to version 19506.448.36 or later.

Plugin Details

Severity: High

ID: 468902

Version: Revision 1.5

Type: Local

Family: Google COS Security Checks

Published: 10/3/2026

Updated: 10/6/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.22

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-80854

CVSS v3

Risk Factor: High

Base Score: 8.4

Temporal Score: 7.3

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 9/4/2026

Reference Information

CVE: CVE-2026-80854

Detections

Analytics