CVE-2026-45901
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: revert commit_mutex usage in reset path It causes circular lock dependency between commit_mutex, nfnl_subsys_ipset and nlk_cb_mutex when nft reset, ipset list, and iptables-nft with '-m set' rule run at the same time. Previous patches made it safe to run individual reset handlers concurrently so commit_mutex is no longer required to prevent this.
Affected versions
Linux kernel versions
6.1.107,
6.6.48,
6.7
and later are affected. Fixed in
6.19.4,
7.0
and their respective stable series.
References
The following references provide additional information about CVE-2026-45901 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/7f261bb906bf527c4a6e2a646e2d5f3679f2a8bc
-
PatchKernel patch commithttps://git.kernel.org/stable/c/ee3978b6a0dcd4215cb7cedcba705a12174786a7
Frequently asked questions
-
What is CVE-2026-45901?
CVE-2026-45901 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.1.107 onward and has been patched in 6.19.4 and 7.0. CVE-2026-45901 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-45901?
Yes — CVE-2026-45901 has been patched. Fixed versions include 6.19.4 and 7.0. If you are running Linux kernel 6.1.107 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-45901 actively exploited?
No — CVE-2026-45901 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.