Google: sys-kernel/cchost-kernel-6_12, sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_12, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_12, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_12, sys-kernel/lakitu-nc-kernel-6_18: security update to 19999.44.106

high Tenable Self-Hosted Container Security Plugin ID 475240

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: tracing: Take trace_array reference
when opening options file The options files do not take the trace_array reference for the options they
represent. This could cause a use-after-free kernel crash if one of these files is opened by one task and
another task removes the instance that the option is for. Because it doesn't take a reference upon
opening, it will not stop the removal which will free the options descriptor that is being used. As the
options are somewhat dynamic in their creation at boot up, each file represents a flag in the trace_array.
The trace_array has an array of indexes to represent each of these flags that is stored in the
trace_flags_index array. The address of the index array element is used to pass to the inode->i_private
pointer. Then that element is read which holds the index (which represents the flag) and then the index is
used to calculate the trace_array descriptor from its trace_flags_index array. One issue is that the index
element can not be referenced until the trace_array's reference is taken. To handle this, create a new
helper function called: trace_array_options_get() that will iterate all the existing trace_arrays in the
ftrace_trace_arrays list (under the trace_types_lock), and compare the passed in address of the index
element with the entire array of the trace_array's trace_flags_index array. If it matches, then up the
corresponding trace_array's reference and return. (CVE-2026-90013)

Solution

Update the sys-kernel/cchost-kernel-6_12 library and its related packages to version 19999.44.106 or later.

Plugin Details

Severity: High

ID: 475240

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/16/2026

Updated: 10/16/2026

Risk Information

VPR

Risk Factor: Medium

Score: 6.9

Percentile: 96.56

Vendor

Vendor Severity: HIGH

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-90013

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 9/16/2026

Reference Information

CVE: CVE-2026-90013

Detections

Analytics