VDB

DEBIAN-CVE-2022-50764

DEBIAN-CVE-2022-50764 PUBLISHED

In the Linux kernel, the following vulnerability has been resolved: ipv6/sit: use DEV_STATS_INC() to avoid data-races syzbot/KCSAN reported that multiple cpus are updating dev->stats.tx_error concurrently. This is because sit tunnels are NETIF_F_LLTX, meaning their ndo_start_xmit() is not protected by a spinlock. While original KCSAN report was about tx path, rx path has the same issue.

Affected Products

VendorProductVersions
Debian:14linux0, 0, 0
Debian:13linux0, 0, 0
Debian:11linux*, 6.1.69-1, *
Debian:12linux0, 0, 0

Timeline

  • Dec 24, 2025 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›