{"apiVersion":"1.0","identifier":"CVE-2026-72060","description":"In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: icssg: guard PA stat lookups icssg_ndo_get_stats64() unconditionally calls emac_get_stat_by_name() with FW PA stat names regardless of whether the PA stats block is present on the hardware. emac_get_stat_by_name() already guards the PA stats lookup with `if (emac->prueth->pa_stats)`; when that pointer is NULL the lookup falls through to netdev_err() and returns -EINVAL. Because ndo_get_stats64 is polled regularly by the networking stack this produces thousands of log entries of the form: icssg-prueth icssg1-eth end0: Invalid stats FW_RX_ERROR A secondary consequence is that the int(-EINVAL) return value is implicitly widened to a near-ULLONG_MAX unsigned value when accumulated into the __u64 fields of rtnl_link_stats64, silently corrupting the rx_errors, rx_dropped and tx_dropped counters reported by `ip -s link`. Every other PA-aware code path in the driver is already guarded with the same `if (emac->prueth->pa_stats)` check. Apply the same guard here.","publishedAt":"2026-08-15T06:21:15","lastModifiedAt":"2026-08-17T06:18:04","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-72060","cvssScore":null,"cvssVector":"Pending","epssProbability":0.00206,"riskScore":0,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-72060","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-72060","en":"https://www.redsauce.net/en/cves/CVE-2026-72060","fr":"https://www.redsauce.net/fr/cves/CVE-2026-72060","pt":"https://www.redsauce.net/pt/cves/CVE-2026-72060","de":"https://www.redsauce.net/de/cves/CVE-2026-72060","sk":"https://www.redsauce.net/sk/cves/CVE-2026-72060","el":"https://www.redsauce.net/el/cves/CVE-2026-72060"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-72060"}}