summaryrefslogtreecommitdiff
path: root/net/ipv6/netfilter
AgeCommit message (Expand)Author
6 daysnetfilter: nf_reject: initialize IPCB at inet ingressKyle Zeng
6 daysnetfilter: nf_conntrack: avoid truncating IPv6 nexthdr offsetJérémy Jean
2026-09-18netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds readLuxiao Xu
2026-09-18netfilter: ip6t_rpfilter: reject routes without inet6_devWeiming Shi
2026-09-07netfilter: ip6_tables: set F_PROTO when proto value is nonzeroFlorian Westphal
2026-08-27netfilter: x_tables: remove pr_debugPablo Neira Ayuso
2026-08-27netfilter: tproxy: use DEBUG_NET_WARN_ON_ONCE for protocol fallbacksFernando Fernandez Mancera
2026-07-31netfilter: nf_tables: call skb_valid_dst() before skb_dst()Pablo Neira Ayuso
2026-07-08netfilter: handle unreadable fragsFlorian Westphal
2026-07-08netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defragXiang Mei
2026-07-03netfilter: ip6tables: mark malformed IPv6 extension headers for hotdropZhixing Chen
2026-06-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2026-06-10netfilter: nft_fib: fix stale stack leak via the OIFNAME registerDavide Ornaghi
2026-06-10netfilter: x_tables: avoid leaking percpu counter pointersKyle Zeng
2026-06-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2026-06-01netfilter: nft_fib_ipv6: bail out of sibling walk if rt got unlinkedJiayuan Chen
2026-05-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2026-05-24netfilter: add option for GCOV profilingFlorian Westphal
2026-05-24netfilter: x_tables: disable 32bit compat interface in user namespacesFlorian Westphal
2026-05-22netfilter: nft_fib_ipv6: handle routes via external nexthopJiayuan Chen
2026-05-22netfilter: nft_fib_ipv6: walk fib6_siblings under RCUJiayuan Chen
2026-05-16netfilter: ip6t_hbh: reject oversized option listsZhengchuan Liang
2026-05-08netfilter: x_tables: close dangling table module init raceFlorian Westphal
2026-05-08netfilter: x_tables: add and use xtables_unregister_table_exitFlorian Westphal
2026-05-08netfilter: x_tables: unregister the templates firstFlorian Westphal
2026-05-08netfilter: x_tables: add and use xt_unregister_table_pre_exitFlorian Westphal
2026-05-08netfilter: x_tables: allocate hook ops while under mutexFlorian Westphal
2026-04-30netfilter: nf_socket: skip socket lookup for non-first fragmentsFernando Fernandez Mancera
2026-04-20netfilter: nat: use kfree_rcu to release opsPablo Neira Ayuso
2026-04-10netfilter: require Ethernet MAC header before using eth_hdr()Zhengchuan Liang
2026-04-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2026-04-08netfilter: ip6t_eui64: reject invalid MAC header for all packetsZhengchuan Liang
2026-03-26Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2026-03-26netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()Ren Wei
2026-03-04netfilter: nft_fib_ipv6: switch to fib6_lookupFlorian Westphal
2026-02-25netfilter: nf_tables: remove register tracking infrastructureFlorian Westphal
2025-09-11netfilter: nf_reject: don't reply to icmp error messagesFlorian Westphal
2025-09-02netfilter: nf_reject: remove unneeded exportsFlorian Westphal
2025-08-25tcp: Don't pass hashinfo to socket lookup helpers.Kuniyuki Iwashima
2025-08-21netfilter: nf_reject: don't leak dst refcount for loopback packetsFlorian Westphal
2025-08-07netfilter: add back NETFILTER_XTABLES dependenciesArnd Bergmann
2025-07-25netfilter: Exclude LEGACY TABLES on PREEMPT_RT.Pablo Neira Ayuso
2025-07-02ipv6: adopt skb_dst_dev() and skb_dst_dev_net[_rcu]() helpersEric Dumazet
2025-07-02ipv6: adopt dst_dev() helperEric Dumazet
2025-06-08treewide, timers: Rename from_timer() to timer_container_of()Ingo Molnar
2025-05-23netfilter: nf_dup{4, 6}: Move duplication check to task_structSebastian Andrzej Siewior
2025-05-23netfilter: nf_tables: nft_fib: consistent l3mdev handlingFlorian Westphal
2025-05-22netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancyFlorian Westphal
2025-03-25Merge tag 'nf-next-25-03-23' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski
2025-03-23netfilter: socket: Lookup orig tuple for IPv6 SNATMaxim Mikityanskiy