In the Linux kernel, the following vulnerability has been resolved:
net: stmmac: initialize ptp_lock at probe time
priv->ptp_lock is only initialized in stmmac_ptp_register(), which runs during __stmmac_open(). However, the lock is also used while the interface is down and has never been opened: tc_taprio_configure() invokes the PTP gettime64() callback to compute the EST base time when offloading a TAPRIO schedule, and stmmac_get_time() takes priv->ptp_lock. Using an uninitialized rwlock is undefined behaviour. Move the rwlock_init() to __stmmac_dvr_probe(), together with the other private locks, so that ptp_lock is always valid regardless of the interface state.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.12Upgrade linux | Sep 30, 2026 | Sep 25, 2026 |
| Redhat_linux | — | No solution exists | Oct 1, 2026 | Sep 25, 2026 |
| Ubuntu | — | Upgrade linux-hwe-5.15Upgrade linux-ibm-5.15Upgrade linux-azureUpgrade linux-intel-iotgUpgrade linux-riscvUpgrade linux-nvidia-tegraUpgrade linux-oem-7.0Upgrade linux-aws-5.15Upgrade linux-gkeUpgrade linux-bluefieldUpgrade linux-hwe-7.0Upgrade linux-awsUpgrade linux-azure-fdeUpgrade linux-nvidia-tegra-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-realtimeUpgrade linux-gcp-5.15Upgrade linux-riscv-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-aws-fipsUpgrade linux-gcpUpgrade linux-riscv-7.0Upgrade linux-oracle-5.15Upgrade linux-lowlatencyUpgrade linux-gkeopUpgrade linux-gcp-fipsUpgrade linux-fipsUpgrade linux-nvidia-tegra-igxUpgrade linuxUpgrade linux-nvidiaUpgrade linux-kvmUpgrade linux-intel-iot-realtimeUpgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux-ibmUpgrade linux-azure-fde-5.15 | Nov 3, 2026 | Sep 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2026 | Sep 25, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub