Description
In the Linux kernel, the following vulnerability has been resolved: ipv6/sit: use DEV_STATS_INC() to avoid data-races syzbot/KCSAN reported that multiple cpus are updating dev->stats.tx_error concurrently. This is because sit tunnels are NETIF_F_LLTX, meaning their ndo_start_xmit() is not protected by a spinlock. While original KCSAN report was about tx path, rx path has the same issue.
References (4)
Core 4
Core References
Scores
EPSS
0.0022
EPSS Percentile
12.2%
Details
Status
published
Products (13)
linux/Kernel
2.6.37 - 5.15.86linux
linux/Kernel
5.16.0 - 6.0.16linux
linux/Kernel
6.1.0 - 6.1.2linux
Linux/Linux
< 2.6.37
Linux/Linux
2.6.37
Linux/Linux
5.15.86 - 5.15.*
Linux/Linux
6.0.16 - 6.0.*
Linux/Linux
6.1.2 - 6.1.*
Linux/Linux
6.2
Linux/Linux
8df40d1033d64597dcf1efd4f7547e817f7a953b - 207501a986831174df09a36a8cb62a28f92f0dc8
... and 3 more
Published
Dec 24, 2025
Tracked Since
Feb 18, 2026