CVE-2026-72037 net: lan743x: Initialize eth_syslock spinlock before use

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize ethsyslock spinlock before use lan743xhardwareinit calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire,...

CVE-2026-72037

The CVE-2026-72037 entry affects the Linux kernel’s lan743x Ethernet subsystem. The root cause is a race in lan743x_hardware_init(): the adapter->eth_syslock_spinlock is used by lan743x_hs_syslock_acquire() before it is initialized, because strap status is read prior to spinlock initialization...

PT-2026-72226

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the lan743x network driver where the lan743x hardware init function calls pci11x1x strap get status during the PCI11x1x probe sequence. This process attempts to acquir...