CVE-2026-72037

In the Linux kernel, the following vulnerability has been resolved:

net: lan743x: Initialize eth_syslock spinlock before use

lan743xhardwareinit() calls pci11x1xstrapgetstatus() during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire(), which relies on adapter->ethsyslockspinlock to serialize access.

The spinlock is currently initialized only after the strap status is read. With CONFIGDEBUGSPINLOCK enabled, taking the zeroed initialized spinlock can trip the spinlock debug check.

Fix by initializing adapter->ethsyslockspinlock before reading the strap status so the probe path never attempts to lock an uninitialized spinlock.