Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: fixed a potential out-of-bounds write in lan743xptpioeventclockget. Before calling lan743xptpioeventclockget, the ‘channel’ value is checked against the maximum value of PCI11X1XPTPIOMAXCHANNELS8. This seems correct...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: The EEPROM and OTP sizes for PCI1xxxx devices have been modified. The maximum OTP and EEPROM sizes for PCI1xxxx devices are 8 Kb and 64 Kb respectively. The maximum size definitions have been adjusted, and the corre...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: lan743x: Fixed the memory leak issue when GSO is enabled. The skb has always been mapped to the LS descriptor. Previously, the skb was mapped to the EXT descriptor when the number of fragments was zero and GSO was enabled...

SUSE CVE-2026-72037

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize ethsyslock spinlock before use lan743xhardwareinit calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098801)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098801 advisory. In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Fix memleak issue when GSO enabled Always map the skb to the LS descriptor...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: The lan743xhardwareinit function calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. This helper function acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire, which relies on...

CVE-2026-72037

A flaw was found in the Linux kernel's lan743x Ethernet driver. A system lock, or spinlock, is accessed during the driver's initialization sequence before it has been properly set up. This improper initialization can lead to a system crash if kernel debugging features are enabled, resulting in a...

Linux Distros Unpatched Vulnerability : CVE-2026-72037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: lan743x: Initialize ethsyslock spinlock before use lan743xhardwareinit calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. That helper acquire...

UBUNTU-CVE-2026-72037

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize ethsyslock spinlock before use lan743xhardwareinit calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire,...

CVE-2026-72037

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize ethsyslock spinlock before use lan743xhardwareinit calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire,...

CVE-2026-72037

The CVE-2026-72037 entry affects the Linux kernel’s lan743x Ethernet subsystem. The root cause is a race in lan743x_hardware_init(): the adapter->eth_syslock_spinlock is used by lan743x_hs_syslock_acquire() before it is initialized, because strap status is read prior to spinlock initialization...

CVE-2026-72037 net: lan743x: Initialize eth_syslock spinlock before use

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize ethsyslock spinlock before use lan743xhardwareinit calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire,...

CVE-2026-72037 net: lan743x: Initialize eth_syslock spinlock before use

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize ethsyslock spinlock before use lan743xhardwareinit calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire,...

EUVD-2026-58995

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize ethsyslock spinlock before use lan743xhardwareinit calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire,...

CVE-2026-72037: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize ethsyslock spinlock before use lan743xhardwareinit calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire,...

PT-2026-72226

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize eth syslock spinlock before use lan743x hardware init calls pci11x1x strap get status during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743x hs syslock...

ROS-20260220-73-0018

A vulnerability in the lan743xptpioeventclockget function of the net component of the Linux operating system kernel is related to reading beyond buffer boundaries in memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37909)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37909 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Fix memleak issue when GSO...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38422)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38422 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Modify the EEPROM and OTP...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38183)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38183 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: lan743x: fix potential out-of- boun...