CVE-2026-23045

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23045", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-01-13T15:37:45.944Z", "datePublished": "2026-02-04T16:00:27.874Z", "dateUpdated": "2026-05-11T21:58:56.122Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T21:58:56.122Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/ena: fix missing lock when update devlink params\n\nFix assert lock warning while calling devl_param_driverinit_value_set()\nin ena.\n\nWARNING: net/devlink/core.c:261 at devl_assert_locked+0x62/0x90, CPU#0: kworker/0:0/9\nCPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.19.0-rc2+ #1 PREEMPT(lazy)\nHardware name: Amazon EC2 m8i-flex.4xlarge/, BIOS 1.0 10/16/2017\nWorkqueue: events work_for_cpu_fn\nRIP: 0010:devl_assert_locked+0x62/0x90\n\nCall Trace:\n <TASK>\n devl_param_driverinit_value_set+0x15/0x1c0\n ena_devlink_alloc+0x18c/0x220 [ena]\n ? __pfx_ena_devlink_alloc+0x10/0x10 [ena]\n ? trace_hardirqs_on+0x18/0x140\n ? lockdep_hardirqs_on+0x8c/0x130\n ? __raw_spin_unlock_irqrestore+0x5d/0x80\n ? __raw_spin_unlock_irqrestore+0x46/0x80\n ? devm_ioremap_wc+0x9a/0xd0\n ena_probe+0x4d2/0x1b20 [ena]\n ? __lock_acquire+0x56a/0xbd0\n ? __pfx_ena_probe+0x10/0x10 [ena]\n ? local_clock+0x15/0x30\n ? __lock_release.isra.0+0x1c9/0x340\n ? mark_held_locks+0x40/0x70\n ? lockdep_hardirqs_on_prepare.part.0+0x92/0x170\n ? trace_hardirqs_on+0x18/0x140\n ? lockdep_hardirqs_on+0x8c/0x130\n ? __raw_spin_unlock_irqrestore+0x5d/0x80\n ? __raw_spin_unlock_irqrestore+0x46/0x80\n ? __pfx_ena_probe+0x10/0x10 [ena]\n ......\n </TASK>"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/amazon/ena/ena_devlink.c"], "versions": [{"version": "816b52624cf6a03ea541956b448025d844a8287d", "lessThan": "f2c4bcfa193eef1b7457a56be9c47a8de015f225", "status": "affected", "versionType": "git"}, {"version": "816b52624cf6a03ea541956b448025d844a8287d", "lessThan": "8da901ffe497a53fa4ecc3ceed0e6d771586f88e", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/amazon/ena/ena_devlink.c"], "versions": [{"version": "6.17", "status": "affected"}, {"version": "0", "lessThan": "6.17", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.6", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17", "versionEndExcluding": "6.18.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17", "versionEndExcluding": "6.19"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/f2c4bcfa193eef1b7457a56be9c47a8de015f225"}, {"url": "https://git.kernel.org/stable/c/8da901ffe497a53fa4ecc3ceed0e6d771586f88e"}], "title": "net/ena: fix missing lock when update devlink params", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/ethernet/amazon/ena/ena_devlink.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "f2c4bcfa193eef1b7457a56be9c47a8de015f225", "status": "affected", "version": "816b52624cf6a03ea541956b448025d844a8287d", "versionType": "git"}, {"lessThan": "8da901ffe497a53fa4ecc3ceed0e6d771586f88e", "status": "affected", "version": "816b52624cf6a03ea541956b448025d844a8287d", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/ethernet/amazon/ena/ena_devlink.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.17"}, {"lessThan": "6.17", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.19", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/ena: fix missing lock when update devlink params\n\nFix assert lock warning while calling devl_param_driverinit_value_set()\nin ena.\n\nWARNING: net/devlink/core.c:261 at devl_assert_locked+0x62/0x90, CPU#0: kworker/0:0/9\nCPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.19.0-rc2+ #1 PREEMPT(lazy)\nHardware name: Amazon EC2 m8i-flex.4xlarge/, BIOS 1.0 10/16/2017\nWorkqueue: events work_for_cpu_fn\nRIP: 0010:devl_assert_locked+0x62/0x90\n\nCall Trace:\n <TASK>\n devl_param_driverinit_value_set+0x15/0x1c0\n ena_devlink_alloc+0x18c/0x220 [ena]\n ? __pfx_ena_devlink_alloc+0x10/0x10 [ena]\n ? trace_hardirqs_on+0x18/0x140\n ? lockdep_hardirqs_on+0x8c/0x130\n ? __raw_spin_unlock_irqrestore+0x5d/0x80\n ? __raw_spin_unlock_irqrestore+0x46/0x80\n ? devm_ioremap_wc+0x9a/0xd0\n ena_probe+0x4d2/0x1b20 [ena]\n ? __lock_acquire+0x56a/0xbd0\n ? __pfx_ena_probe+0x10/0x10 [ena]\n ? local_clock+0x15/0x30\n ? __lock_release.isra.0+0x1c9/0x340\n ? mark_held_locks+0x40/0x70\n ? lockdep_hardirqs_on_prepare.part.0+0x92/0x170\n ? trace_hardirqs_on+0x18/0x140\n ? lockdep_hardirqs_on+0x8c/0x130\n ? __raw_spin_unlock_irqrestore+0x5d/0x80\n ? __raw_spin_unlock_irqrestore+0x46/0x80\n ? __pfx_ena_probe+0x10/0x10 [ena]\n ......\n </TASK>"}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnet/ena: corregir bloqueo faltante al actualizar los par\u00e1metros de devlink\n\nCorregir la advertencia de bloqueo de aserci\u00f3n al llamar a devl_param_driverinit_value_set() en ena.\n\nADVERTENCIA: net/devlink/core.c:261 at devl_assert_locked+0x62/0x90, CPU#0: kworker/0:0/9\nCPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 No contaminado 6.19.0-rc2+ #1 PREEMPT(lazy)\nNombre del hardware: Amazon EC2 m8i-flex.4xlarge/, BIOS 1.0 10/16/2017\nCola de trabajo: events work_for_cpu_fn\nRIP: 0010:devl_assert_locked+0x62/0x90\n\nTraza de llamada:\n \n devl_param_driverinit_value_set+0x15/0x1c0\n ena_devlink_alloc+0x18c/0x220 [ena]\n ? __pfx_ena_devlink_alloc+0x10/0x10 [ena]\n ? trace_hardirqs_on+0x18/0x140\n ? lockdep_hardirqs_on+0x8c/0x130\n ? __raw_spin_unlock_irqrestore+0x5d/0x80\n ? __raw_spin_unlock_irqrestore+0x46/0x80\n ? devm_ioremap_wc+0x9a/0xd0\n ena_probe+0x4d2/0x1b20 [ena]\n ? __lock_acquire+0x56a/0xbd0\n ? __pfx_ena_probe+0x10/0x10 [ena]\n ? local_clock+0x15/0x30\n ? __lock_release.isra.0+0x1c9/0x340\n ? mark_held_locks+0x40/0x70\n ? lockdep_hardirqs_on_prepare.part.0+0x92/0x170\n ? trace_hardirqs_on+0x18/0x140\n ? lockdep_hardirqs_on+0x8c/0x130\n ? __raw_spin_unlock_irqrestore+0x5d/0x80\n ? __raw_spin_unlock_irqrestore+0x46/0x80\n ? __pfx_ena_probe+0x10/0x10 [ena]\n ......\n "}], "id": "CVE-2026-23045", "lastModified": "2026-06-17T10:20:45.990", "metrics": {}, "published": "2026-02-04T16:16:20.007", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8da901ffe497a53fa4ecc3ceed0e6d771586f88e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f2c4bcfa193eef1b7457a56be9c47a8de015f225"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Deferred"}

{"bugzilla": {"description": "kernel: net/ena: fix missing lock when update devlink params", "id": "2436827", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436827"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "details": ["No description is available for this CVE."], "name": "CVE-2026-23045", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-02-04T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-23045\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-23045\nhttps://lore.kernel.org/linux-cve-announce/2026020440-CVE-2026-23045-103a@gregkh/T"], "threat_severity": "Moderate"}

{"analysis": {"en": {"generated_at": "2026-04-18T19:46:30.529667+00:00", "value": {"mitigation_remediation": ["Apply a Linux kernel update that includes the commit adding the missing lock to the ena driver (e.g., the kernel release following commit\u00a08da901ffe).", "If a kernel update is not feasible, disable the ena network driver or remove the device to prevent the race condition from occurring.", "Keep lockdep (lock debugging) enabled in the kernel configuration and monitor system logs for any lock assertion warnings that indicate residual synchronization issues."], "summary": {"action": "Patch Update", "impact": "Potential race condition causing kernel instability or data corruption"}, "threat_synthesis": {"affected_systems": "Affected products are Linux kernel implementations. No specific kernel release is listed as vulnerable, but the issue appears in recent kernel sources such as the 6.19.x series and earlier. Users of Amazon EC2 instances running kernel variants that include the ena driver may be impacted if the driver is compiled without the missing lock fix.", "description_and_impact": "The kernel vulnerability originates from the ena network driver in the Linux kernel, where an assertion lock warning occurs when the driver initialization function devl_param_driverinit_value_set() is called without holding the required lock. Based on the description, this missing synchronization can lead to a race condition that may corrupt shared data structures within the kernel and result in a kernel panic or corrupted network state. The weakness aligns with CWE\u2011362, which describes concurrent execution without proper locking. The exact exploitation path is not explicitly detailed; it is inferred that a local attacker manipulating devlink parameters could trigger the race and potentially cause a denial\u2011of\u2011service or a crash that undermines system stability.", "risk_and_exploitability": "The CVSS score of 7.0 denotes a medium\u2011to\u2011high severity. The EPSS probability is under 1\u202f%, suggesting a low likelihood of exploitation at present, and the vulnerability is not listed in the CISA KEV catalog. Exploitation would require an attacker to trigger the race condition by manipulating devlink parameters, typically requiring local privilege or a compromised kernel module. The likely attack vector is inferred to be local privilege or a compromised kernel module, as the description does not explicitly state the vector. If executed, the flaw can lead to kernel crashes and denial of service, impacting availability and potentially allowing privilege escalation if an attacker can abuse corrupted kernel state."}}}}, "created": "2026-04-18T20:00:09.265926+00:00", "updated": "2026-04-18T20:00:09.265936+00:00", "vendors": [], "weaknesses": ["CWE-362"]}