Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-50764

ipv6/sit: use DEV_STATS_INC() to avoid data-races

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6/sit: use DEV_STATS_INC() to avoid data-races syzbot/KCSAN reported that multiple cpus are updating dev->stats.tx_error concurrently. This is because sit tunnels are NETIF_F_LLTX, meaning their ndo_start_xmit() is not protected by a spinlock. While original KCSAN report was about tx path, rx path has the same issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8df40d1033d64597dcf1efd4f7547e817f7a953b to < 222cc04356984f3f98acfa756a69d4bed7c501acaffected
  • 8df40d1033d64597dcf1efd4f7547e817f7a953b to < 4eed93bb3e57b8cc78d17166a14e40a73276015aaffected
  • 8df40d1033d64597dcf1efd4f7547e817f7a953b to < 207501a986831174df09a36a8cb62a28f92f0dc8affected
  • 8df40d1033d64597dcf1efd4f7547e817f7a953b to < cb34b7cf17ecf33499c9298943f85af247abc1e9affected

Linux Linux

Default version status: affected

  • 2.6.37affected
  • 0 to < 2.6.37unaffected
  • 5.15.86 to ≤ 5.15.*unaffected
  • 6.0.16 to ≤ 6.0.*unaffected
  • 6.1.2 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References