Riskcovery

CVE-2022-50764

ipv6/sit: use DEV_STATS_INC() to avoid data-races

State
Published
Severity
Not scored
Published
Dec 24, 2025
Updated
May 11, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6/sit: use DEV_STATS_INC() to avoid data-races

syzbot/KCSAN reported that multiple cpus are updating dev->stats.tx_error concurrently.

This is because sit tunnels are NETIF_F_LLTX, meaning their ndo_start_xmit() is not protected by a spinlock.

While original KCSAN report was about tx path, rx path has the same issue.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8df40d1033d64597dcf1efd4f7547e817f7a953b to before 222cc04356984f3f98acfa756a69d4bed7c501acAffected
  • 8df40d1033d64597dcf1efd4f7547e817f7a953b to before 4eed93bb3e57b8cc78d17166a14e40a73276015aAffected
  • 8df40d1033d64597dcf1efd4f7547e817f7a953b to before 207501a986831174df09a36a8cb62a28f92f0dc8Affected
  • 8df40d1033d64597dcf1efd4f7547e817f7a953b to before cb34b7cf17ecf33499c9298943f85af247abc1e9Affected
LinuxLinux
  • 2.6.37Affected
  • before 2.6.37Not affected
  • 5.15.86 through 5.15.*Not affected
  • 6.0.16 through 6.0.*Not affected
  • 6.1.2 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.