CVE-2022-50764

ipv6/sit: use DEV_STATS_INC() to avoid data-races

published December 24, 2025

CVSS
—
EPSS
0%
Percentile
16.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ipv6/sit: use DEV_STATS_INC() to avoid data-races

syzbot/KCSAN reported that multiple cpus are updating dev->stats.tx_error

concurrently.

This is because sit tunnels are NETIF_F_LLTX, meaning their ndo_start_xmit()

is not protected by a spinlock.

While original KCSAN report was about tx path, rx path has the same issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00259 · 16.6th percentile
Published
2025-12-24T13:05Z
EPSS history
Timeline
  • 24 DEC 13:05Z
    ipv6/sit: use DEV_STATS_INC() to avoid data-races
    cvelistv5