CVE-2026-45901
netfilter: nf_tables: revert commit_mutex usage in reset path
- State
- Published
- Severity
- Not scored
- Published
- May 27, 2026
- Updated
- Oct 21, 2026
- Reserved
- May 13, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: revert commit_mutex usage in reset path
It causes circular lock dependency between commit_mutex, nfnl_subsys_ipset and nlk_cb_mutex when nft reset, ipset list, and iptables-nft with '-m set' rule run at the same time.
Previous patches made it safe to run individual reset handlers concurrently so commit_mutex is no longer required to prevent this.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
LinuxLinux |
|
LinuxLinux |
|
References
- https://git.kernel.org/stable/c/b0dd8637fbaae8405eb9e8de741f9ce7c9667b6f
- https://git.kernel.org/stable/c/d66bedfe97a2bc321fa8118e669aae988038f729
- https://git.kernel.org/stable/c/f6410d18c1e2da325df02be989d5bca5ed38b086
- https://git.kernel.org/stable/c/ee3978b6a0dcd4215cb7cedcba705a12174786a7
- https://git.kernel.org/stable/c/7f261bb906bf527c4a6e2a646e2d5f3679f2a8bc
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.