In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_inner: release local_lock before re-enabling softirqs

Quoting sashiko:
In the error path, local_bh_enable() is called before
local_unlock_nested_bh().