{"apiVersion":"1.0","identifier":"CVE-2026-72037","description":"In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize eth_syslock spinlock before use lan743x_hardware_init() calls pci11x1x_strap_get_status() during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743x_hs_syslock_acquire(), which relies on adapter->eth_syslock_spinlock to serialize access. The spinlock is currently initialized only after the strap status is read. With CONFIG_DEBUG_SPINLOCK enabled, taking the zeroed initialized spinlock can trip the spinlock debug check. Fix by initializing adapter->eth_syslock_spinlock before reading the strap status so the probe path never attempts to lock an uninitialized spinlock.","publishedAt":"2026-08-15T06:21:12","lastModifiedAt":"2026-08-17T06:18:01","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-72037","cvssScore":null,"cvssVector":"Pending","epssProbability":0.00206,"riskScore":0,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-72037","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-72037","en":"https://www.redsauce.net/en/cves/CVE-2026-72037","fr":"https://www.redsauce.net/fr/cves/CVE-2026-72037","pt":"https://www.redsauce.net/pt/cves/CVE-2026-72037","de":"https://www.redsauce.net/de/cves/CVE-2026-72037","sk":"https://www.redsauce.net/sk/cves/CVE-2026-72037","el":"https://www.redsauce.net/el/cves/CVE-2026-72037"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-72037"}}