Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_12: security update to 19506.224.7

medium Tenable Self-Hosted Container Security Plugin ID 470074

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix empty payload in tap
skb for non-linear buffers For non-linear skbs, virtio_transport_build_skb() goes through
virtio_transport_copy_nonlinear_skb() to copy the original payload in the new skb to be delivered to the
vsockmon tap device. This manually initializes an iov_iter but does not set iov_iter.count. Since the
iov_iter is zero-initialized, the copy length is zero and no payload is actually copied to the monitor
interface, leaving data un-initialized. Fix this by removing the linear vs non-linear split and using
skb_copy_datagram_iter() with iov_iter_kvec() for all cases, as vhost-vsock already does. This handles
both linear and non-linear skbs, properly initializes the iov_iter, and removes the now unused
virtio_transport_copy_nonlinear_skb(). While touching this code, let's also check the return value of
skb_copy_datagram_iter(), even though it's unlikely to fail. (CVE-2026-46207)

Solution

Update the sys-kernel/cchost-kernel-6_12 library and its related packages to version 19506.224.7 or later.

Plugin Details

Severity: Medium

ID: 470074

Version: Revision 1.6

Type: Local

Family: Google COS Security Checks

Published: 10/3/2026

Updated: 10/6/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.75

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2026-46207

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 5/28/2026

Reference Information

CVE: CVE-2026-46207

Detections

Analytics