CVE-2026-72060

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The icssg ndo get stats64() function unconditionally calls emac get stat by name() using FW PA stat names, even if the PA stats block is missing from the hardware. When the emac->prueth->pa stats pointer is NULL, the system generates excessive log entries and returns an -EINVAL error. This return value is implicitly widened to a large unsigned value when added to the rtnl link stats64 fields, resulting in the corruption of rx errors, rx dropped, and tx dropped counters reported by ip -s link.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.