CVE-2026-97963

net: stmmac: initialize ptp_lock at probe time

N/A
Published: September 25, 2026 at 10:23 AM UTC
Updated: October 19, 2026 at 10:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: initialize ptp_lock at probe time priv->ptp_lock is only initialized in stmmac_ptp_register(), which runs during __stmmac_open(). However, the lock is also used while the interface is down and has never been opened: tc_taprio_configure() invokes the PTP gettime64() callback to compute the EST base time when offloading a TAPRIO schedule, and stmmac_get_time() takes priv->ptp_lock. Using an uninitialized rwlock is undefined behaviour. Move the rwlock_init() to __stmmac_dvr_probe(), together with the other private locks, so that ptp_lock is always valid regardless of the interface state.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.6b60189e0392fa06348911077ef281eb2b1047b6a
Vendor states this is fixed in 0338c68e22abd2ee509ec2e32508a50896618c32 (fixed)
Vendor states this is fixed in 25cc0096efba83b4e0e6fa50f03e9543b41e9d3d (fixed)
Vendor states this is fixed in 420315413b29635de1d4ea4142e410e6465260f3 (fixed)
Vendor states this is fixed in 79fb5bcc50996964e076dffbdc24b7d2c06bd957 (fixed)
Vendor states this is fixed in 7ced87834f3a58761d4bbcabf8326478548e6a54 (fixed)
Vendor states this is fixed in b1986595cf827c38ff929e22fbc9ca8f76379306 (fixed)
Vendor states this is fixed in ee33e424d4932c70f103b94a46b685923f236f65 (fixed)
Vendor states this is fixed in 5.15.222 (unaffected)
Vendor states this is fixed in 5.6 (unaffected)
Vendor states this is fixed in 6.1.189 (unaffected)
Vendor states this is fixed in 6.12.111 (unaffected)
Vendor states this is fixed in 6.18.53 (unaffected)
Vendor states this is fixed in 6.6.158 (unaffected)
Vendor states this is fixed in 7.2.7 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc3 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card