{
  "cveId": "CVE-2026-23045",
  "url": "https://patchblox.com/security/cve/CVE-2026-23045",
  "summary": "CVE-2026-23045 is fixed in linux on 1 platform by DEBIAN-CVE-2026-23045 (version 6.18.8-1), released February 4, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/ena: fix missing lock when update devlink pa...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  net/ena: fix missing lock when update devlink params  Fix assert lock warning while calling devl_param_driverinit_value_set() in ena.  WARNING: net/devlink/core.c:261 at devl_assert_locked\u002B0x62/0x90, CPU#0: kworker/0:0/9 CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.19.0-rc2\u002B #1 PREEMPT(lazy) Hardware name: Amazon EC2 m8i-flex.4xlarge/, BIOS 1.0 10/16/2017 Workqueue: events work_for_cpu_fn RIP: 0010:devl_assert_locked\u002B0x62/0x90  Call Trace:  \u003CTASK\u003E  devl_param_driverinit_value_set\u002B0x15/0x1c0  ena_devlink_alloc\u002B0x18c/0x220 [ena]  ? __pfx_ena_devlink_alloc\u002B0x10/0x10 [ena]  ? trace_hardirqs_on\u002B0x18/0x140  ? lockdep_hardirqs_on\u002B0x8c/0x130  ? __raw_spin_unlock_irqrestore\u002B0x5d/0x80  ? __raw_spin_unlock_irqrestore\u002B0x46/0x80  ? devm_ioremap_wc\u002B0x9a/0xd0  ena_probe\u002B0x4d2/0x1b20 [ena]  ? __lock_acquire\u002B0x56a/0xbd0  ? __pfx_ena_probe\u002B0x10/0x10 [ena]  ? local_clock\u002B0x15/0x30  ? __lock_release.isra.0\u002B0x1c9/0x340  ? mark_held_locks\u002B0x40/0x70  ? lockdep_hardirqs_on_prepare.part.0\u002B0x92/0x170  ? trace_hardirqs_on\u002B0x18/0x140  ? lockdep_hardirqs_on\u002B0x8c/0x130  ? __raw_spin_unlock_irqrestore\u002B0x5d/0x80  ? __raw_spin_unlock_irqrestore\u002B0x46/0x80  ? __pfx_ena_probe\u002B0x10/0x10 [ena]  ......  \u003C/TASK\u003E",
  "published": "2026-02-04T16:16:20Z",
  "severity": "",
  "epss": 0.00181,
  "epssPercentile": 0.07745,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.18.8-1",
      "fix": "DEBIAN-CVE-2026-23045",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-23045",
      "released": "2026-02-04T16:16:20Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}