Detections
Analytics

Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_12: security update to 19506.224.7

medium Tenable Self-Hosted Container Security Plugin ID 468974

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: smb: client: use kzalloc to zero-
 initialize security descriptor buffer Commit 62e7dd0a39c2d ("smb: common: change the data type of num_aces
 to le16") split struct smb_acl's __le32 num_aces field into __le16 num_aces and __le16 reserved. The
 reserved field corresponds to Sbz2 in the MS-DTYP ACL wire format, which must be zero [1]. When building
 an ACL descriptor in build_sec_desc(), we are using a kmalloc()'ed descriptor buffer and writing the
 fields explicitly using le16() writes now. This never writes to the 2 byte reserved field, leaving it as
 uninitialized heap data. When the reserved field happens to contain non-zero slab garbage, Samba rejects
 the security descriptor with "ndr_pull_security_descriptor failed: Range Error", causing chmod to fail
 with EINVAL. Change kmalloc() to kzalloc() to ensure the entire buffer is zero-initialized. [1]
 https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-dtyp/20233ed8-a6c6-4097-aafa-dd545ed24428
 (CVE-2026-46139)

Solution

Update the sys-kernel/cchost-kernel-6_12 library and its related packages to version 19506.224.7 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-129.oval.xml.tar.gz

Plugin Details

Severity: Medium

ID: 468974

Version: Revision 1.4

Type: Local

Published: 10/3/2026

Updated: 10/5/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.71

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 6

Temporal Score: 4.4

Vector: CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-46139

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 5/26/2026

Reference Information

CVE: CVE-2026-46139