Detections
Analytics

Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 20198.0.0

high Tenable Self-Hosted Container Security Plugin ID 475513

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix hang for
 aborted WRITE_PENDING commands When a LUN_RESET aborts a WRITE command that is in the
 TRANSPORT_WRITE_PENDING state, the target core sets CMD_T_ABORTED and waits for the frontend to finish
 processing. If the initiator subsequently sends the remaining dataout PDUs, __iscsit_check_dataout_hdr()
 catches the payload, stops the dataout timer if the sequence is final and finally dumps the data. However,
 the iSCSI target doesn't trigger the completion process for these aborted commands. Because of this, the
 abort path hangs indefinitely in target_put_cmd_and_wait(), leading to a deadlocked target worker thread.
 Fix this by explicitly calling target_complete_cmd() when the final dataout PDU is received for an aborted
 WRITE command. target_complete_cmd() detects the CMD_T_ABORTED flag and cleanly routes the command into
 target_abort_work, allowing the abort completion to successfully unblock. (CVE-2026-97951)

Solution

Update the sys-kernel/cchost-kernel-6_18 library and its related packages to version 20198.0.0 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-138.oval.xml.tar.gz

Plugin Details

Severity: High

ID: 475513

Version: Revision 1.1

Type: Local

Published: 10/16/2026

Updated: 10/16/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.3

Percentile: 53.47

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-97951

CVSS v3

Risk Factor: High

Base Score: 7.1

Temporal Score: 6.2

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 9/25/2026

Reference Information

CVE: CVE-2026-97951