summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2 daysMerge tag 'net-7.4-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/netd...Linus Torvalds
9 daystreewide: refresh kmalloc_obj() conversionsKees Cook
10 daysnetfilter: nat: zero newrange before filling it inFlorian Westphal
10 daysnetfilter: xt_recent: do not call remove_proc_entry() under recent_lockCen Zhang (Microsoft)
10 daysnetfilter: nf_tables: fix memleak when rule deletion fails with hardware offloadPablo Neira Ayuso
10 daysnetfilter: nf_conntrack_sip: fix OOB read in ct_sip_parse_transport()Joas Antonio dos Santos
10 daysnetfilter: nft_set_rbtree: check catchall_sync return before queue_doneXingyuan Mo
10 daysnetfilter: flowtable: extend ct timeout of offloaded GRE flowsMichail Andreas Michalopoulos
10 daysnetfilter: nf_dup: preserve guard across NFQUEUE reinjectionZihan Xi
11 daysipvs: fix protocol data lifetime during namespace teardownChengfeng Ye
11 daysipvs: Defer application parent freeing until after RCU readersChengfeng Ye
13 daysnetfilter: nft_reject: prevent unbounded recursion in output hooksFernando Fernandez Mancera
2026-10-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPaolo Abeni
2026-10-20Merge tag 'nf-26-10-19' of git://git.kernel.org/pub/scm/linux/kernel/git/netf...Jakub Kicinski
2026-10-20Merge tag 'nf-next-26-10-18' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski
2026-10-19netfilter: nf_conntrack_netlink: fix inverted IPv6 tuple filterLiu Chao
2026-10-19netfilter: flowtable: reset transport header after nf_flow_encap_pop()Lorenzo Bianconi
2026-10-19netfilter: xt_dccp: handle reserved options as single-byteSung Byeongchan
2026-10-19netfilter: nft_set_rbtree: narrow down range completion to anonymous setsPablo Neira Ayuso
2026-10-19netfilter: flowtable: use the vlan id, not the full tci, in the tuple keyShuangfeng He
2026-10-19ipvs: skip committing sync_threshold when proc_dointvec failsJoel Granados
2026-10-19ipvs: fix more races around the overload flagJulian Anastasov
2026-10-19netfilter: nft_payload: restrict checksum offsets to known valuesFlorian Westphal
2026-10-18netfilter: flowtable: unify tunnel push for IPv4 and IPv6Lorenzo Bianconi
2026-10-18netfilter: flowtable: add encap_proto to flow_offload_tunnelLorenzo Bianconi
2026-10-18netfilter: flowtable: populate tunnel tuple regardless of inner protocolLorenzo Bianconi
2026-10-18netfilter: flowtable: set inner protocol when popping tunnel headerLorenzo Bianconi
2026-10-18netfilter: nft_compat: restrict raw table targets/matchesFlorian Westphal
2026-10-18netfilter: nft_exthdr: avoid 60 bytes stack buffer in TCP option manglingFernando Fernandez Mancera
2026-10-18netfilter: nft_exthdr: remove redundant op parsing in tcp_set_initFernando Fernandez Mancera
2026-10-18netfilter: nf_tables: switch chain_types array to rcuFlorian Westphal
2026-10-18netfilter: conntrack: fix unlikely UaF in gc workerFlorian Westphal
2026-10-18netfilter: nf_queue: limit the hook drop flush to the unregistered hook pointAntonio Ojea
2026-10-14ipvs: fix buffer overflow when sending sync messagesJulian Anastasov
2026-10-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2026-10-08ipv4: validate checksum_start before completing checksumMichael S. Tsirkin
2026-10-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2026-09-30netfilter: flowtable: restore ieee80211 forward pathPablo Neira Ayuso
2026-09-30netfilter: flowtable: generalize pending status bitPablo Neira Ayuso
2026-09-30netfilter: bpf: reject invalid NAT manipulation typesFernando Fernandez Mancera
2026-09-30netfilter: nft_set_rbtree: skip transaction elements during GCWeiming Shi
2026-09-30ipvs: filter some flags received in the backup serverJulian Anastasov
2026-09-30ipvs: do not create invisible templatesJulian Anastasov
2026-09-30ipvs: bound LBLCR and LBLC cache growthZhiling Zou
2026-09-30ipvs: fix missing counter decrement in lblcJulian Anastasov
2026-09-30netfilter: nft_flow_offload: drop flowtable reference on init error pathAohan Mei
2026-09-27netfilter: conntrack: make filtering by zone discoverableIlya Maximets
2026-09-27netfilter: ctnetlink: fix inverted IPv6 address match in dump filterPiotr Kubik
2026-09-27netfilter: nfnetlink: Fix for interrupted hook dumpsPhil Sutter
2026-09-27netfilter: flowtable: check namespace before iterating flowsQingfang Deng