Medium · published May 27, 2026
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: revert commit_mutex usage in reset path
It causes circular lock dependency between commit_mutex, nfnl_subsys_ipset
and nlk_cb_mutex when nft reset, ipset list, and iptables-nft with '-m set'
rule run at the same time.
Previous patches made it safe to run individual reset handlers concurrently
so commit_mutex is no longer required to prevent this.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 6.1.107, < 6.2 | 6.2 |
| linux/linux_kernel | ≥ 6.6.48, < 6.19.4 | 6.19.4 |