CVE-2026-74617

In the Linux kernel, the following vulnerability has been resolved:

dibs: initialise dibs->lock in dibsdevalloc()

dibs->lock is initialised by dibsdevadd(), but a dibs device can

already take interrupts before that call: ism_probe() runs

ismdevinit(), and hence request_irq(), before it calls

dibsdevadd(). No client can have registered a dmb at that point, so

no dmb interrupt can occur, but a GID event interrupt can, and

ismhandleirq() takes dibs->lock unconditionally on entry, before it

inspects anything else.

Initialise the lock in dibsdevalloc() instead, so that it is valid as

soon as a driver can publish the device to its interrupt handler.