{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"b0dd8637fbaae8405eb9e8de741f9ce7c9667b6f","status":"affected","version":"f123293db16dcd0cd81b246ae60e6362f0025d0a","versionType":"git"},{"lessThan":"d66bedfe97a2bc321fa8118e669aae988038f729","status":"affected","version":"3cb03edb4de33fd04c4ea55f47397b96a8657c53","versionType":"git"},{"lessThan":"f6410d18c1e2da325df02be989d5bca5ed38b086","status":"affected","version":"3cb03edb4de33fd04c4ea55f47397b96a8657c53","versionType":"git"},{"lessThan":"ee3978b6a0dcd4215cb7cedcba705a12174786a7","status":"affected","version":"3cb03edb4de33fd04c4ea55f47397b96a8657c53","versionType":"git"},{"lessThan":"7f261bb906bf527c4a6e2a646e2d5f3679f2a8bc","status":"affected","version":"3cb03edb4de33fd04c4ea55f47397b96a8657c53","versionType":"git"},{"status":"affected","version":"fb1adb05ea87b6149e65a31e511756c4f470d0cd","versionType":"git"},{"lessThan":"6.6.160","status":"affected","version":"6.6.48","versionType":"semver"},{"lessThan":"6.2","status":"affected","version":"6.1.107","versionType":"semver"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.7"},{"lessThan":"6.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.160","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.101","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.42","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-45901","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: revert commit_mutex usage in reset path\n\nIt causes circular lock dependency between commit_mutex, nfnl_subsys_ipset\nand nlk_cb_mutex when nft reset, ipset list, and iptables-nft with '-m set'\nrule run at the same time.\n\nPrevious patches made it safe to run individual reset handlers concurrently\nso commit_mutex is no longer required to prevent this.","epss":{"date":"2026-11-06","percentile":0.07835,"score":0.00182},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793980391710,"publishedAt":1779884229861,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/b0dd8637fbaae8405eb9e8de741f9ce7c9667b6f"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d66bedfe97a2bc321fa8118e669aae988038f729"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/f6410d18c1e2da325df02be989d5bca5ed38b086"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/ee3978b6a0dcd4215cb7cedcba705a12174786a7"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7f261bb906bf527c4a6e2a646e2d5f3679f2a8bc"}],"remediation":[],"revision":"6c96455edc408a2d3095a186d6037928214d77cc5ac551bc822c601419ea9ee1","sources":[{"modifiedAt":1793980391710,"name":"CNA: Linux","retrievedAt":1793981767676,"url":"https://www.cve.org/CVERecord?id=CVE-2026-45901"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793981786983,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-45901"}],"ssvc":{"assessedAt":1793979839614,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"netfilter: nf_tables: revert commit_mutex usage in reset path","updatedAt":1793981786983}