In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftables: join hook list via splicelist_rcu() in commit phase
Publish new hooks in the list into the basechain/flowtable using splicelistrcu() to ensure netlink dump list traversal via rcu is safe while concurrent ruleset update is going on.