summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
3 daysnetfilter: nft_fib: fix stale stack leak via the OIFNAME registerDavide Ornaghi
3 daysnetfilter: nft_exthdr: fix register tracking for F_PRESENT flagFlorian Westphal
3 daysnetfilter: nf_log: validate MAC header was set before dumping itXiang Mei
3 daysnetfilter: nf_conntrack: destroy stale expectfn expectations on unregisterWeiming Shi
3 daysnetfilter: nf_tables_offload: drop device refcount on errorFlorian Westphal
3 daysnetfilter: revalidate bridge portsFlorian Westphal
12 daysnetfilter: nft_byteorder: remove multi-register supportFlorian Westphal
12 daysnetfilter: nft_ct: bail out on template ct in get evalJiayuan Chen
12 daysnetfilter: nft_tunnel: fix use-after-free on object destroyTristan Madani
12 daysnetfilter: conntrack_irc: fix possible out-of-bounds readFlorian Westphal
12 daysnetfilter: synproxy: add mutex to guard hook reference countingFernando Fernandez Mancera
12 daysipvs: clear the svc scheduler ptr early on editJulian Anastasov
12 daysnetfilter: xt_NFQUEUE: prefer raw_smp_processor_idFernando Fernandez Mancera
2026-05-22netfilter: nf_tables: fix dst corruption in same register operationFernando Fernandez Mancera
2026-05-22netfilter: disable payload mangling in usernsFlorian Westphal
2026-05-22netfilter: xt_cpu: prefer raw_smp_processor_idFlorian Westphal
2026-05-22netfilter: nf_conntrack_gre: fix gre keymap list corruptionFlorian Westphal
2026-05-22netfilter: synproxy: refresh tcphdr after skb_ensure_writableChris Mason
2026-05-22netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without dire...Hamza Mahfooz
2026-05-16netfilter: nf_queue: hold bridge skb->dev while queuedHaoze Xie
2026-05-16netfilter: ipset: annotate "pos" for concurrent readers/writersJozsef Kadlecsik
2026-05-16netfilter: ipset: Fix data race between add and dump in all hash typesJozsef Kadlecsik
2026-05-16netfilter: ipset: Fix data race between add and list header in all hash typesJozsef Kadlecsik
2026-05-16netfilter: nft_inner: release local_lock before re-enabling softirqsFlorian Westphal
2026-05-16netfilter: ipset: stop hash:* range iteration at endNan Li
2026-05-16netfilter: nft_inner: Fix IPv6 inner_thoff desyncYizhou Zhao
2026-05-16netfilter: ipset: fix a potential dump-destroy raceJozsef Kadlecsik
2026-05-16ipvs: avoid possible loop in ip_vs_dst_event on resizingJulian Anastasov
2026-05-16netfilter: nf_conntrack_helper: fix possible null deref during error logFlorian Westphal
2026-05-08netfilter: nft_ct: fix missing expect put in obj evalLi Xiasong
2026-05-08netfilter: nf_conntrack_sip: get helper before allocating expectationLi Xiasong
2026-05-08netfilter: ctnetlink: check tuple and mask in expectations created via nfqueuePablo Neira Ayuso
2026-05-08netfilter: nf_conntrack_expect: restore helper propagation via expectationPablo Neira Ayuso
2026-05-08netfilter: x_tables: add and use xtables_unregister_table_exitFlorian Westphal
2026-05-08netfilter: x_tables: add and use xt_unregister_table_pre_exitFlorian Westphal
2026-05-08netfilter: x_tables: allocate hook ops while under mutexFlorian Westphal
2026-05-08netfilter: x_tables: allow initial table replace without emitting audit log m...Florian Westphal
2026-05-05ipvs: Guard access of HK_TYPE_KTHREAD cpumask with RCUWaiman Long
2026-05-05ipvs: fix shift-out-of-bounds in ip_vs_rht_desired_sizeJulian Anastasov
2026-05-05ipvs: fix races around est_mutex and est_cpulistJulian Anastasov
2026-05-05ipvs: do not leak dest after get from dest trashJulian Anastasov
2026-05-05ipvs: fix the spin_lock usage for RT buildJulian Anastasov
2026-05-05ipvs: fix races around the conn_lfactor and svc_lfactor sysctl varsJulian Anastasov
2026-05-05ipvs: fixes for the new ip_vs_status infoJulian Anastasov
2026-05-01netfilter: flowtable: use skb_pull_rcsum() to pop vlan/pppoe headerPablo Neira Ayuso
2026-05-01netfilter: flowtable: fix inline pppoe encapsulation in xmit pathPablo Neira Ayuso
2026-05-01netfilter: flowtable: fix inline vlan encapsulation in xmit pathPablo Neira Ayuso
2026-04-30netfilter: flowtable: ensure sufficient headroom in xmit pathPablo Neira Ayuso
2026-04-30netfilter: xtables: fix L4 header parsing for non-first fragmentsFernando Fernandez Mancera
2026-04-30netfilter: nf_tables: skip L4 header parsing for non-first fragmentsFernando Fernandez Mancera