In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftables: revert commitmutex usage in reset path
It causes circular lock dependency between commitmutex, nfnlsubsysipset and nlkcb_mutex when nft reset, ipset list, and iptables-nft with '-m set' rule run at the same time.
Previous patches made it safe to run individual reset handlers concurrently so commit_mutex is no longer required to prevent this.