CVE-2026-74617

A flaw was found in the Linux kernel's dibs device driver. The dibs->lock was not properly initialized when a dibs device was allocated, allowing a Global ID (GID) event interrupt to occur before the lock was ready. This could lead to the system attempting to acquire an uninitialized lock, potentially causing a system crash and resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate severity rather than Important because exploitation is limited to a local denial of service via a kernel panic during hardware initialization, with no compromise of confidentiality or data integrity. Triggering the flaw requires a race condition during device probing where an interrupt occurs before the device lock is initialized. Exposure on Red Hat platforms is minimal, as this component is not present in standard production releases such as Red Hat Enterprise Linux 8 and 9.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.