Detections
Analytics

Google: sys-kernel/csql-kernel-6_6, sys-kernel/lakitu-kernel-6_6, sys-kernel/lakitu-nc-kernel-6_6, sys-kernel/lakitu-vgpu-kernel-6_6: security update to 18867.624.2

high Tenable Self-Hosted Container Security Plugin ID 474899

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async
 COPY writeback fails Async COPY captures nn->writeverf at request time and reports it to the client via
 CB_OFFLOAD after the worker kthread completes. When the post-copy vfs_fsync_range() or
 filemap_check_wb_err() in _nfsd_copy_file_range() reports an error, the worker correctly leaves
 NFSD4_COPY_F_COMMITTED clear so that CB_OFFLOAD encodes wr_stable_how as NFS_UNSTABLE, but the server's
 write verifier is not rotated. A client that receives NFS_UNSTABLE in CB_OFFLOAD follows up with COMMIT to
 make the copied data durable. With the verifier unchanged, COMMIT returns the same value the client just
 received via CB_OFFLOAD, and the client concludes the copy is durable -- silently dropping the data whose
 writeback in fact failed. This violates the UNSTABLE+COMMIT durability contract (RFC 7862 section 15.1,
 RFC 8881 section 18.32) and matches the bug just fixed in nfsd_vfs_write() and nfsd_commit(). Rotate
 nn->writeverf at the writeback-failure site. The async COPY worker has no svc_rqst, so
 commit_reset_write_verifier() is not available here; calling nfsd_reset_write_verifier() directly mirrors
 the trace-less reset already used by nfsd_file_check_write_error() for the same purpose. Filter out
 -EAGAIN and -ESTALE, matching commit_reset_write_verifier(), since neither indicates a durable-storage
 failure. (CVE-2026-89706)

Solution

Update the sys-kernel/csql-kernel-6_6 library and its related packages to version 18867.624.2 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-121.oval.xml.tar.gz

Plugin Details

Severity: High

ID: 474899

Version: Revision 1.1

Type: Local

Published: 10/16/2026

Updated: 10/16/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.66

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N

CVSS Score Source: CVE-2026-89706

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 9/11/2026

Reference Information

CVE: CVE-2026-89706