CVE-2022-50764

Linux Kernel - Data Race in IPv6 SIT Tunnel Statistics

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6/sit: use DEV_STATS_INC() to avoid data-races syzbot/KCSAN reported that multiple cpus are updating dev->stats.tx_error concurrently. This is because sit tunnels are NETIF_F_LLTX, meaning their ndo_start_xmit() is not protected by a spinlock. While original KCSAN report was about tx path, rx path has the same issue.

Scores

EPSS 0.0022
EPSS Percentile 12.2%

Details

Status published
Products (13)
linux/Kernel 2.6.37 - 5.15.86linux
linux/Kernel 5.16.0 - 6.0.16linux
linux/Kernel 6.1.0 - 6.1.2linux
Linux/Linux < 2.6.37
Linux/Linux 2.6.37
Linux/Linux 5.15.86 - 5.15.*
Linux/Linux 6.0.16 - 6.0.*
Linux/Linux 6.1.2 - 6.1.*
Linux/Linux 6.2
Linux/Linux 8df40d1033d64597dcf1efd4f7547e817f7a953b - 207501a986831174df09a36a8cb62a28f92f0dc8
... and 3 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026