CVE-2026-45901

CVE-2026-45901

Medium · published May 27, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: revert commit_mutex usage in reset path

It causes circular lock dependency between commit_mutex, nfnl_subsys_ipset

and nlk_cb_mutex when nft reset, ipset list, and iptables-nft with '-m set'

rule run at the same time.

Previous patches made it safe to run individual reset handlers concurrently

so commit_mutex is no longer required to prevent this.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-05-27T18:17Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.1.107, < 6.26.2
linux/linux_kernel≥ 6.6.48, < 6.19.46.19.4
References (5)
EPSS history
Timeline
  • 27 MAY 12:17Z
    netfilter: nf_tables: revert commit_mutex usage in reset path
    cvelistv5