Google: sys-kernel/cchost-kernel-6_12, sys-kernel/csql-kernel-6_12: security update to 19216.220.24

medium Tenable Self-Hosted Container Security Plugin ID 472443

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: smb/client: fix memory leak in
smb2_open_file() Reproducer: 1. server: directories are exported read-only 2. client: mount -t cifs
//${server_ip}/export /mnt 3. client: dd if=/dev/zero of=/mnt/file bs=512 count=1000 oflag=direct 4.
client: umount /mnt 5. client: sleep 1 6. client: modprobe -r cifs The error message is as follows:
============================================================================= BUG cifs_small_rq (Not
tainted): Objects remaining on __kmem_cache_shutdown()
----------------------------------------------------------------------------- Object 0x00000000d47521be
@offset=14336 ... WARNING: mm/slub.c:1251 at __kmem_cache_shutdown+0x34e/0x440, CPU#0: modprobe/1577 ...
Call Trace: <TASK> kmem_cache_destroy+0x94/0x190 cifs_destroy_request_bufs+0x3e/0x50 [cifs]
cleanup_module+0x4e/0x540 [cifs] __se_sys_delete_module+0x278/0x400 __x64_sys_delete_module+0x5f/0x70
x64_sys_call+0x2299/0x2ff0 do_syscall_64+0x89/0x350 entry_SYSCALL_64_after_hwframe+0x76/0x7e ...
kmem_cache_destroy cifs_small_rq: Slab cache still has objects when called from
cifs_destroy_request_bufs+0x3e/0x50 [cifs] WARNING: mm/slab_common.c:532 at
kmem_cache_destroy+0x16b/0x190, CPU#0: modprobe/1577 (CVE-2026-23205)

Solution

Update the sys-kernel/cchost-kernel-6_12 library and its related packages to version 19216.220.24 or later.

Plugin Details

Severity: Medium

ID: 472443

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/3/2026

Updated: 10/3/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.49

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

CVSS Score Source: CVE-2026-23205

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 2/14/2026

Reference Information

CVE: CVE-2026-23205

Detections

Analytics