CVE-2022-50764

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6/sit: use DEV_STATS_INC() to avoid data-races syzbot/KCSAN reported that multiple cpus are updating dev->stats.tx_error concurrently. This is because sit tunnels are NETIF_F_LLTX, meaning their ndo_start_xmit() is not protected by a spinlock. While original KCSAN report was about tx path, rx path has the same issue.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedDec 24, 2025
First seenDec 24, 2025

How to fix

Update
  • Linux Linux222cc04356984f3f98acfa756a69d4bed7c501ac, 4eed93bb3e57b8cc78d17166a14e40a73276015a, 207501a986831174df09a36a8cb62a28f92f0dc8, cb34b7cf17ecf33499c9298943f85af247abc1e9 or later

Affected products

ProductAffected versionsFixed in
Linux Linux8df40d1033d64597dcf1efd4f7547e817f7a953b ≤ v < 222cc04356984f3f98acfa756a69d4bed7c501ac, 8df40d1033d64597dcf1efd4f7547e817f7a953b ≤ v < 4eed93bb3e57b8cc78d17166a14e40a73276015a, 8df40d1033d64597dcf1efd4f7547e817f7a953b ≤ v < 207501a986831174df09a36a8cb62a28f92f0dc8, 8df40d1033d64597dcf1efd4f7547e817f7a953b ≤ v < cb34b7cf17ecf33499c9298943f85af247abc1e9, 2.6.37222cc04356984f3f98acfa756a69d4bed7c501ac, 4eed93bb3e57b8cc78d17166a14e40a73276015a, 207501a986831174df09a36a8cb62a28f92f0dc8, cb34b7cf17ecf33499c9298943f85af247abc1e9

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-50764 · Linux · Dark Radar