Detections
Analytics

Google: sys-kernel/cchost-kernel-6_18, sys-kernel/csql-kernel-6_18, sys-kernel/lakitu-kernel-6_18, sys-kernel/lakitu-nc-kernel-6_18: security update to 20162.0.0

medium Tenable Self-Hosted Container Security Plugin ID 475667

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: pidfd: hold exec_update_lock around
 namespace ioctl The PIDFD_GET_*_NAMESPACE ioctls in pidfd_ioctl() perform a filesystem credentials ptrace
 access check before handing out a namespace file descriptor. The accompanying comment states that the code
 "mirrors nsfs behavior", but, unlike the corresponding procfs paths, it does so without holding the target
 task's exec_update_lock. proc_ns_get_link() and proc_ns_readlink() both take exec_update_lock for reading
 around the ptrace check and the namespace lookup, so that the credentials used for the access decision
 match those of the task when its namespace is read. Without it, a caller can pass the check against the
 target's old credentials and then read the namespace after the target has execve()'d a setuid binary and
 committed new credentials -- accessing namespace information it should have been denied. Hold
 exec_update_lock for reading around the ptrace check and the namespace lookup so that pidfd truly mirrors
 nsfs behavior, as the comment already claims. open_namespace() itself runs outside the lock: once a
 namespace reference is obtained it carries its own refcount and is opened with the caller's own
 credentials, so a concurrent execve() on the target can no longer affect the outcome. (CVE-2026-89766)

Solution

Update the sys-kernel/cchost-kernel-6_18 library and its related packages to version 20162.0.0 or later.

See Also

https://storage.googleapis.com/cos-oval-vulnerability-feed/cos-138.oval.xml.tar.gz

Plugin Details

Severity: Medium

ID: 475667

Version: Revision 1.1

Type: Local

Published: 10/16/2026

Updated: 10/16/2026

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.66

Vendor

Vendor Severity: LOW

CVSS v2

Risk Factor: Low

Base Score: 2.1

Temporal Score: 1.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS Score Source: CVE-2026-89766

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 9/11/2026

Reference Information

CVE: CVE-2026-89766