CVE-2026-23045

net/ena: fix missing lock when update devlink params

published February 4, 2026

CVSS
—
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net/ena: fix missing lock when update devlink params

Fix assert lock warning while calling devl_param_driverinit_value_set()

in ena.

WARNING: net/devlink/core.c:261 at devl_assert_locked+0x62/0x90, CPU#0: kworker/0:0/9

CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.19.0-rc2+ #1 PREEMPT(lazy)

Hardware name: Amazon EC2 m8i-flex.4xlarge/, BIOS 1.0 10/16/2017

Workqueue: events work_for_cpu_fn

RIP: 0010:devl_assert_locked+0x62/0x90

Call Trace:

<TASK>

devl_param_driverinit_value_set+0x15/0x1c0

ena_devlink_alloc+0x18c/0x220 [ena]

? __pfx_ena_devlink_alloc+0x10/0x10 [ena]

? trace_hardirqs_on+0x18/0x140

? lockdep_hardirqs_on+0x8c/0x130

? __raw_spin_unlock_irqrestore+0x5d/0x80

? __raw_spin_unlock_irqrestore+0x46/0x80

? devm_ioremap_wc+0x9a/0xd0

ena_probe+0x4d2/0x1b20 [ena]

? __lock_acquire+0x56a/0xbd0

? __pfx_ena_probe+0x10/0x10 [ena]

? local_clock+0x15/0x30

? __lock_release.isra.0+0x1c9/0x340

? mark_held_locks+0x40/0x70

? lockdep_hardirqs_on_prepare.part.0+0x92/0x170

? trace_hardirqs_on+0x18/0x140

? lockdep_hardirqs_on+0x8c/0x130

? __raw_spin_unlock_irqrestore+0x5d/0x80

? __raw_spin_unlock_irqrestore+0x46/0x80

? __pfx_ena_probe+0x10/0x10 [ena]

......

</TASK>

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Published
2026-02-04T16:00Z
EPSS history
Timeline
  • 04 FEB 16:00Z
    net/ena: fix missing lock when update devlink params
    cvelistv5