CVE-2026-45901 netfilter: nf_tables: revert commit_mutex usage in reset path
A circular lock dependency in the Linux kernel netfilter subsystem can cause a deadlock during concurrent reset and list operations, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-45901?
CVE-2026-45901 is a medium-severity vulnerability in Linux kernel, published on 27 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: revert commit_mutex usage in reset path
It causes circular lock dependency between commit_mutex, nfnl_subsys_ipset and nlk_cb_mutex when nft reset, ipset list, and iptables-nft with '-m set' rule run at the same time.
Previous patches made it safe to run individual reset handlers concurrently so commit_mutex is no longer required to prevent this.
Which versions are affected by CVE-2026-45901?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-45901?
Apply the vendor's patch.
Is CVE-2026-45901 being exploited?
There is no known exploitation of CVE-2026-45901 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-88692, BELL-CVE-2026-45901, DEBIAN-CVE-2026-45901, GHSA-jhvq-4r2h-7c2q, ROOT-OS-DEBIAN-12-CVE-2026-45901, ROOT-OS-DEBIAN-13-CVE-2026-45901 and 2 more.