Detections
Analytics

Google: sys-kernel/csql-kernel-6_6, sys-kernel/tpusev-kernel-6_6: security update to 18613.534.62

high Tenable Self-Hosted Container Security Plugin ID 472352

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind
 to clsact/ingress qdiscs and shared blocks As Paolo said earlier [1]: "Since the blamed commit below,
 classify can return TC_ACT_CONSUMED while the current skb being held by the defragmentation engine. As
 reported by GangMin Kim, if such packet is that may cause a UaF when the defrag engine later on tries to
 tuch again such packet." act_ct was never meant to be used in the egress path, however some users are
 attaching it to egress today [2]. Attempting to reach a middle ground, we noticed that, while most qdiscs
 are not handling TC_ACT_CONSUMED, clsact/ingress qdiscs are. With that in mind, we address the issue by
 only allowing act_ct to bind to clsact/ingress qdiscs and shared blocks. That way it's still possible to
 attach act_ct to egress (albeit only with clsact). [1]
 https://lore.kernel.org/netdev/674b8cbfc385c6f37fb29a1de08d8fe5c2b0fbee.1771321118.git.pabeni@redhat.com/
 [2] https://lore.kernel.org/netdev/[email protected]/ (CVE-2026-23270)

Solution

Update the sys-kernel/csql-kernel-6_6 library and its related packages to version 18613.534.62 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-117.oval.xml.tar.gz

Plugin Details

Severity: High

ID: 472352

Version: Revision 1.1

Type: Local

Published: 10/3/2026

Updated: 10/3/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.76

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-23270

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 3/18/2026

Reference Information

CVE: CVE-2026-23270