CVE-2026-72037

The CVE-2026-72037 entry affects the Linux kernel’s lan743x Ethernet subsystem. The root cause is a race in lan743x_hardware_init(): the adapter->eth_syslock_spinlock is used by lan743x_hs_syslock_acquire() before it is initialized, because strap status is read prior to spinlock initialization...

CVE-2026-72037 net: lan743x: Initialize eth_syslock spinlock before use

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize ethsyslock spinlock before use lan743xhardwareinit calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire,...

PT-2026-72226

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize eth syslock spinlock before use lan743x hardware init calls pci11x1x strap get status during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743x hs syslock...