Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_12: security update to 19506.0.140

high Tenable Self-Hosted Container Security Plugin ID 469782

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: efi: Fix reservation of unaccepted
memory table The reserve_unaccepted() function incorrectly calculates the size of the memblock reservation
for the unaccepted memory table. It aligns the size of the table, but fails to account for cases where the
table's starting physical address (efi.unaccepted) is not page-aligned. If the table starts at an offset
within a page and its end crosses into a subsequent page that the aligned size does not cover, the end of
the table will not be reserved. This can lead to the table being overwritten or inaccessible, causing a
kernel panic in accept_memory(). This issue was observed when starting Intel TDX VMs with specific memory
sizes (e.g., > 64GB). Fix this by calculating the end address first (including the unaligned start) and
then aligning it up, ensuring the entire range is covered by the reservation. (CVE-2026-45851)

Solution

Update the sys-kernel/cchost-kernel-6_12 library and its related packages to version 19506.0.140 or later.

Plugin Details

Severity: High

ID: 469782

Version: Revision 1.5

Type: Local

Family: Google COS Security Checks

Published: 10/3/2026

Updated: 10/6/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.3

Percentile: 53.64

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 6.2

Temporal Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C

CVSS Score Source: CVE-2026-45851

CVSS v3

Risk Factor: High

Base Score: 7.1

Temporal Score: 6.2

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 3/27/2026

Reference Information

CVE: CVE-2026-45851

Detections

Analytics