PT-2026-6115 · Ena+1 · Ena+1

Published 2026-01-01 · Updated 2026-02-04 · CVE-2026-23045

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc2+

Description The Linux kernel contains an issue within the ena network driver related to a missing lock when updating devlink parameters. Specifically, a warning was observed during the call to devl param driverinit value set(). This can lead to an assertion failure. The issue occurs when handling device link parameters within the ena driver. The call trace indicates the problem originates from the devl assert locked function in net/devlink/core.c.

Recommendations Update to a version newer than 6.19.0-rc2+ to resolve this issue.

Exploit

Related Identifiers

CVE-2026-23045

Affected Products

Linux Kernel

Ena

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23045.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2026-23045 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23045 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23045 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23045 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23045 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23045 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23045 · Vendor Advisory
• https://git.kernel.org/linus/8da901ffe497a53fa4ecc3ceed0e6d771586f88e · Note
• https://git.kernel.org/stable/c/8da901ffe497a53fa4ecc3ceed0e6d771586f88e · Note
• https://git.kernel.org/stable/c/f2c4bcfa193eef1b7457a56be9c47a8de015f225 · Note
• https://t.me/CVEtracker/43736 · Telegram Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note