CVE-2026-45901

netfilter: nf_tables: revert commit_mutex usage in reset path

State
Published
Severity
Not scored
Published
May 27, 2026
Updated
Oct 21, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: revert commit_mutex usage in reset path

It causes circular lock dependency between commit_mutex, nfnl_subsys_ipset and nlk_cb_mutex when nft reset, ipset list, and iptables-nft with '-m set' rule run at the same time.

Previous patches made it safe to run individual reset handlers concurrently so commit_mutex is no longer required to prevent this.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f123293db16dcd0cd81b246ae60e6362f0025d0a to before b0dd8637fbaae8405eb9e8de741f9ce7c9667b6fAffected
  • 3cb03edb4de33fd04c4ea55f47397b96a8657c53 to before d66bedfe97a2bc321fa8118e669aae988038f729Affected
  • 3cb03edb4de33fd04c4ea55f47397b96a8657c53 to before f6410d18c1e2da325df02be989d5bca5ed38b086Affected
  • 3cb03edb4de33fd04c4ea55f47397b96a8657c53 to before ee3978b6a0dcd4215cb7cedcba705a12174786a7Affected
  • 3cb03edb4de33fd04c4ea55f47397b96a8657c53 to before 7f261bb906bf527c4a6e2a646e2d5f3679f2a8bcAffected
  • fb1adb05ea87b6149e65a31e511756c4f470d0cdAffected
  • 6.6.48 to before 6.6.160Affected
  • 6.1.107 to before 6.2Affected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.101 through 6.12.*Not affected
  • 6.18.42 through 6.18.*Not affected
  • 6.19.4 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.