CVE-2026-72037

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the lan743x network driver where the lan743x hardware init() function calls pci11x1x strap get status() during the PCI11x1x probe sequence. This process attempts to acquire the Ethernet subsystem hardware lock through the lan743x hs syslock acquire() function, which depends on the eth syslock spinlock variable to serialize access. Because the spinlock is initialized only after the strap status is read, attempting to use the zeroed spinlock while CONFIG DEBUG SPINLOCK is enabled can trigger a spinlock debug check. A spinlock is a synchronization mechanism used to protect shared data from being accessed by multiple threads simultaneously.

Recommendations Initialize the eth syslock spinlock variable before reading the strap status to ensure the probe path does not attempt to lock an uninitialized spinlock.