vulnerability

Debian: CVE-2022-50764: linux -- security update

Severity
6
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:C)
Published
Dec 29, 2025
Added
Dec 29, 2025
Modified
Jan 8, 2026

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6/sit: use DEV_STATS_INC() to avoid data-races syzbot/KCSAN reported that multiple cpus are updating dev->stats.tx_error concurrently. This is because sit tunnels are NETIF_F_LLTX, meaning their ndo_start_xmit() is not protected by a spinlock. While original KCSAN report was about tx path, rx path has the same issue.

Solution

debian-upgrade-linux
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.