| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-11-01 06:15 UTC | ipvs: avoid wrapping persistent service timeouts | 2 | x-professor@outlook.com | - |
| 2026-11-01 01:45 UTC | netfilter: nf_conntrack_reasm: restore IPv6 nhoff after reassembly | 1 | ryosuke@ikotaslabs.com | - |
| 2026-10-31 15:54 UTC | netfilter: nft_set_rbtree: do not pair an expired start with another interval's end | 1 | devnull@kernel.org | - |
| 2026-10-31 07:15 UTC | ipvs: avoid wrapping persistent service timeouts | 1 | x-professor@outlook.com | in progress |
| 2026-10-30 13:57 UTC | netfilter: nfnetlink_queue: keep socket ownership when expanding skb | 1 | fmancera@suse.de | finished in 4h3m0s |
| 2026-10-30 04:21 UTC | netfilter: br_netfilter: reject unsafe neighbour devices for DNAT | 1 | kylebot@openai.com | finished in 3h52m0s |
| 2026-10-29 22:01 UTC | netfilter: nft_flow_offload: do not offload multicast | 2 | koralilgun@gmail.com | finished in 3h51m0s |
| 2026-10-29 13:35 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 1 | lorenzo.bianconi@oss.qualcomm.com | finished in 3h57m0s |
| 2026-10-29 13:17 UTC | netfilter: xt_time: fix monthday computation for dates past 2039 | 1 | fmancera@suse.de | finished in 4h10m0s |
| 2026-10-28 21:44 UTC | netfilter: xt_recent: do not call remove_proc_entry() under recent_lock | 1 | cenzhang@linux.microsoft.com | finished in 4h7m0s |
| 2026-10-28 20:59 UTC | netfilter: nft_flow_offload: do not offload multicast | 1 | koralilgun@gmail.com | finished in 3h51m0s |
| 2026-10-28 19:10 UTC | net/ipv6: don't route packets with unknown source address | 3 | ihuguet@riseup.net | finished in 4h16m0s |
| 2026-10-28 06:22 UTC | netfilter: nf_tables: fix flow rule leak in nft_delrule() error path | 1 | hdthky0@gmail.com | finished in 4h37m0s |
| 2026-10-26 12:53 UTC | netfilter: xt_policy: add NULL check for skb_dst() in output policy match | 1 | fangxy@xiaopeng.com | finished in 4h17m0s |
| 2026-10-26 12:07 UTC | netfilter: x_tables: check target name before accessing verdict | 1 | fmancera@suse.de | finished in 4h10m0s |
| 2026-10-26 10:29 UTC | netfilter: ipset: fix double free on kernel-side delete during resize | 3 | fuchen.dust@gmail.com | finished in 4h47m0s |
| 2026-10-26 03:56 UTC | netfilter: flowtable: remove hardware flows before unbinding | 1 | plcharriere@gmail.com | finished in 3h51m0s |
| 2026-10-25 14:07 UTC | netfilter: ipset: fix double free on kernel-side delete during resize | 2 | fuchen.dust@gmail.com | finished in 4h36m0s |
| 2026-10-24 22:03 UTC | netfilter: nft_set_pipapo: skip transaction elements during GC | 1 | joasantonio108@gmail.com | finished in 4h0m0s |
| 2026-10-24 17:03 UTC | netfilter: nf_conntrack_sip: fix OOB read in ct_sip_parse_transport() | 2 | joasantonio108@gmail.com | finished in 4h12m0s |
| 2026-10-22 17:48 UTC | netfilter: nf_conntrack_h323: fix out-of-bounds read in get_bitmap() | 1 | luuducanh05051995@gmail.com | finished in 1h52m0s |
| 2026-10-22 17:22 UTC | netfilter: nf_conntrack_sip: fix out-of-bounds read in ct_sip_parse_transport() | 1 | luuducanh05051995@gmail.com | finished in 4h5m0s |
| 2026-10-22 12:57 UTC | more virtio-net csum hardening | 5 | mst@redhat.com | finished in 4h28m0s |
| 2026-10-22 10:59 UTC | netfilter: nf_nat: do not link a conntrack twice into nat_bysource | 1 | avimalin@gmail.com | finished in 4h13m0s |
| 2026-10-21 18:03 UTC | xsk, ipv6: validate user-supplied checksum offsets | 1 | nick.simo@gmail.com | finished in 4h20m0s |
| 2026-10-21 17:50 UTC | netfilter: flowtable: fetch hardware counters before removing a flow | 1 | dreyksmail@gmail.com | finished in 4h56m0s |
| 2026-10-21 07:21 UTC | netfilter: nfnetlink_queue: use the verdict portid for NFQA_EXP events | 1 | theodorlarionov@gmail.com | finished in 4h44m0s |
| 2026-10-20 13:29 UTC | netfilter: bridge: use DEBUG_NET_WARN_ON_ONCE in nf_ct_bridge_refrag() | 2 | laveeshb@laveeshbansal.com | finished in 1h3m0s |
| 2026-10-20 10:35 UTC | netfilter: flowtable: extend ct timeout of offloaded GRE flows | 1 | mike.michalo@gmail.com | finished in 4h15m0s |
| 2026-10-20 00:54 UTC | netfilter: bridge: refragment packets with a vlan tag moved by the bridge | 1 | laveeshb@laveeshbansal.com | finished in 4h12m0s |
| 2026-10-19 12:03 UTC | more virtio-net csum hardening | 3 | mst@redhat.com | finished in 4h41m0s |
| 2026-10-19 10:16 UTC | netfilter: flowtable: fix pmtu discovery in nf_flow_tunnel_ip6ip6_push() | 1 | lorenzo.bianconi@oss.qualcomm.com | finished in 3h51m0s |
| 2026-10-19 07:56 UTC | netfilter: nf_conntrack_netlink: fix inverted IPv6 tuple filter | 1 | liuc63@xiaopeng.com | finished in 4h4m0s |
| 2026-10-18 05:23 UTC | netfilter: ipset: don't mask the element in place in mtype_test_cidrs() | 2 | ty@000ty.net | finished in 3h49m0s |
| 2026-10-18 03:52 UTC | netfilter: ipset: restore element before rescanning cidrs on seqcount retry | 1 | ty@000ty.net | finished in 3h55m0s |
| 2026-10-17 23:58 UTC | netfilter: flowtable: tear down bridged flows on layer 2 roaming | 8 | julius@bairaktaris.de | finished in 3h50m0s |
| 2026-10-16 14:37 UTC | selinux: don't label bridged packets in selinux_ip_forward() | 1 | joasantonio108@gmail.com | finished in 2h22m0s |
| 2026-10-15 12:41 UTC | more virtio-net csum hardening | 2 | mst@redhat.com | finished in 4h34m0s |
| 2026-10-15 08:56 UTC | netfilter: flowtable: use PPPoE GSO handler | 1 | qingfang.deng@linux.dev | finished in 4h10m0s |
| 2026-10-14 23:56 UTC | netfilter: flowtable: tear down bridged flows on layer 2 roaming | 7 | julius@bairaktaris.de | finished in 4h3m0s |
| 2026-10-13 23:43 UTC | netfilter: pin file with get_file_rcu() before reading f_cred | 1 | tristmd@gmail.com |
finished
in 5h1m0s
[7 findings] |
| 2026-10-13 10:58 UTC | more virtio-net csum hardening | 1 | mst@redhat.com | finished in 4h25m0s |
| 2026-10-12 16:33 UTC | netfilter: ipset: fix double free on kernel-side delete during resize | 1 | fuchen.dust@gmail.com | finished in 4h40m0s |
| 2026-10-09 16:26 UTC | netfilter: synproxy: check TCP header before verifying checksum | 2 | raghunathpalla.0209@gmail.com | finished in 4h36m0s |
| 2026-10-09 15:02 UTC | netfilter: bridge: refragment reassembled packets passed up | 1 | g.goller@proxmox.com | finished in 4h10m0s |
| 2026-10-08 17:40 UTC | netfilter: nft_exthdr: add inner option type search for MPTCP | 1 | fmancera@suse.de | finished in 4h40m0s |
| 2026-10-08 15:28 UTC | netfilter: nf_conntrack_sip: only honour Via: port in original direction | 2 | joasantonio108@gmail.com | finished in 4h26m0s |
| 2026-10-08 02:45 UTC | netfilter: ebtables: ebt_802_3: check the LLC fields before reading them | 2 | guozh23@xiaopeng.com | finished in 1h50m0s |
| 2026-10-07 22:42 UTC | ipv4: validate checksum_start before completing checksum | 1 | mst@redhat.com | finished in 4h4m0s |
| 2026-10-07 18:20 UTC | netfilter: nft_set_pipapo: skip transaction elements during GC | 1 | dungvn2345@gmail.com | finished in 3h58m0s |
| 2026-10-07 15:48 UTC | netfilter: ip6t_NPT: ensure skb is writable before header modification | 3 | joasantonio108@gmail.com | finished in 4h43m0s |
| 2026-10-07 15:25 UTC | netfilter: nf_conntrack_sip: only honour Via: port in original direction | 1 | joasantonio108@gmail.com | finished in 4h30m0s |
| 2026-10-07 01:48 UTC | netfilter: conntrack: avoid recursive master destruction | 3 | 4ncienth@gmail.com | finished in 4h29m0s |
| 2026-10-06 20:48 UTC | doc: add MPTCP subtypes documentation to man page | 2 | fmancera@suse.de | skipped |
| 2026-10-06 08:58 UTC | netfilter: nf_conntrack: add ct expression support for netdev egress chains | 1 | hari.chandrakanthan@oss.qualcomm.com | finished in 4h11m0s |
| 2026-10-05 20:04 UTC | netfilter: nft_set_rbtree: reject expired interval ends | 1 | jeremy.jean@oss.cyber.gouv.fr | finished in 3h58m0s |
| 2026-10-05 15:12 UTC | netfilter: nft_synproxy: only handle pure SYN and ACK packets | 2 | ngocthang2710.1999@gmail.com | finished in 4h7m0s |
| 2026-10-04 21:24 UTC | netfilter: preserve bridge egress VLAN tags | 2 | parri.andrea@gmail.com | finished in 4h1m0s |
| 2026-10-04 17:16 UTC | netfilter: flowtable: carry a priority into the offload | 3 | julius@bairaktaris.de | finished in 3h57m0s |
| 2026-10-04 17:16 UTC | netfilter: offload a TCP flow whose reply is never seen | 2 | julius@bairaktaris.de | finished in 4h2m0s |
| 2026-10-04 17:16 UTC | netfilter: flowtable: update upper device stats in the fast path | 1 | julius@bairaktaris.de | finished in 4h1m0s |
| 2026-10-04 17:16 UTC | netfilter: flowtable: tear down bridged flows on layer 2 roaming | 6 | julius@bairaktaris.de | finished in 4h12m0s |
| 2026-10-04 16:06 UTC | netfilter: nft_synproxy: only handle pure SYN and ACK packets | 1 | ngocthang2710.1999@gmail.com | finished in 4h11m0s |
| 2026-10-02 20:10 UTC | netfilter: nf_nat: replace u_int16_t with u16 | 1 | carlos@carlosgrillet.me | skipped |
| 2026-10-02 16:56 UTC | netfilter: conntrack: reject nested ctnetlink master chains | 2 | 4ncienth@gmail.com | finished in 3h58m0s |
| 2026-10-01 18:02 UTC | netfilter: conntrack: avoid recursive master destruction | 1 | 4ncienth@gmail.com | finished in 4h20m0s |
| 2026-09-30 20:54 UTC | netfilter: ip6t_NPT: ensure skb is writable before header modification | 2 | joasantonio108@gmail.com | skipped |
| 2026-09-30 18:09 UTC | netfilter: ip6t_NPT: ensure skb is writable before header modification | 1 | joasantonio108@gmail.com | skipped |
| 2026-09-30 07:14 UTC | net: bridge: vlan: optimize standard fdb fwding path | 1 | razor@blackwall.org | finished in 4h6m0s |
| 2026-09-29 14:14 UTC | doc: add MPTCP subtypes documentation to man page | 1 | fmancera@suse.de | skipped |
| 2026-09-28 17:33 UTC | netfilter: conntrack: shared port parser for helpers | 5 | rc@rexion.ai | finished in 3h51m0s |
| 2026-09-28 16:18 UTC | netfilter: br_netfilter: restore VLAN tag on refragmented IPv6 packets | 1 | parri.andrea@gmail.com | finished in 4h0m0s |
| 2026-09-28 12:46 UTC | net: cap skb->queue_mapping when the tx queue is picked | 4 | jhs@mojatatu.com | finished in 1h5m0s |
| 2026-09-28 08:28 UTC | netfilter: ebtables: ebt_802_3: drop short frames before the match reads LLC | 1 | guozh23@xiaopeng.com | finished in 2h26m0s |
| 2026-09-27 16:32 UTC | netfilter: flowtable: flush delete work after final GC | 2 | nicoyip.dev@gmail.com | finished in 4h5m0s |
| 2026-09-27 07:15 UTC | netfilter: nf_tables: serialize offload stats with callback unbind | 1 | nicoyip.dev@gmail.com | finished in 5h5m0s |
| 2026-09-27 06:24 UTC | ipvs: fix protocol data lifetime during namespace teardown | 1 | nicoyip.dev@gmail.com | finished in 1h55m0s |
| 2026-09-27 04:31 UTC | netfilter: x_tables: avoid holding mutex over faultable user copies | 4 | zihanx@nebusec.ai | finished in 4h6m0s |
| 2026-09-26 20:45 UTC | netfilter: ip6t_SYNPROXY: check TCP header before verifying checksum | 1 | raghunathpalla.0209@gmail.com | finished in 3h49m0s |
| 2026-09-26 17:52 UTC | netfilter: conntrack: wait for RCU readers before freeing the hash | 1 | nicoyip.dev@gmail.com | finished in 4h7m0s |
| 2026-09-26 17:51 UTC | ipvs: Defer application parent freeing until after RCU readers | 1 | nicoyip.dev@gmail.com | finished in 4h2m0s |
| 2026-09-25 14:11 UTC | ipvs: fix OOB write when NATing ICMPv6 errors quoting non-first fragments | 1 | axel.mierczuk@1password.com | finished in 4h19m0s |
| 2026-09-25 14:11 UTC | ipvs: keep templates and cport 0 conns away from packet lookups | 1 | axel.mierczuk@1password.com | finished in 4h0m0s |
| 2026-09-25 13:51 UTC | expr: add support to math expression | 5 | fmancera@suse.de | skipped |
| 2026-09-25 13:49 UTC | netfilter: nf_tables: add math expression support | 6 | fmancera@suse.de | finished in 2h24m0s |
| 2026-09-24 20:25 UTC | netfilter: nf_flow_table_bpf: populate VLAN encap in XDP flowtable lookup | 1 | adrianox@gmail.com | finished in 3h18m0s |
| 2026-09-24 20:13 UTC | netfilter: nft_reject: prevent unbounded recursion in output hooks | 3 | fmancera@suse.de | finished in 4h0m0s |
| 2026-09-23 09:54 UTC | ipvs: avoid stack overflow from recursive connection expiration | 4 | zihanx@nebusec.ai | finished in 4h18m0s |
| 2026-09-22 19:18 UTC | netfilter: bpf: reject invalid NAT manipulation types | 1 | fmancera@suse.de | finished in 4h4m0s |
| 2026-09-22 16:40 UTC | netfilter: nft_nat: use the right enum members for nat type switch | 1 | fmancera@suse.de | finished in 1h3m0s |
| 2026-09-22 09:52 UTC | netfilter: nf_dup: disable duplication in user namespaces | 3 | zihanx@nebusec.ai | finished in 5h23m0s |
| 2026-09-22 09:25 UTC | netfilter: nft_reject: prevent unbounded recursion in output hooks | 2 | fmancera@suse.de | finished in 4h33m0s |
| 2026-09-22 09:08 UTC | ipvs: skip committing sync_threshold when proc_dointvec fails | 1 | joel.granados@kernel.org | finished in 4h0m0s |
| 2026-09-22 03:03 UTC | net: prevent partial checksums from modifying network headers | 6 | habte.yibelo@gmail.com | finished in 4h2m0s |
| 2026-09-21 22:29 UTC | netfilter: nft_reject: prevent unbounded recursion in output hooks | 1 | fmancera@suse.de | finished in 4h3m0s |
| 2026-09-21 14:55 UTC | ovs, net/sched: fixes for UAF after conntrack extension realloc | 1 | i.maximets@ovn.org | finished in 4h24m0s |
| 2026-09-21 02:53 UTC | net: prevent partial checksums from modifying network headers | 5 | habte.yibelo@gmail.com | finished in 3h47m0s |
| 2026-09-21 02:08 UTC | netfilter: nft_set_rbtree: skip transaction elements during GC | 1 | bestswngs@gmail.com | finished in 4h20m0s |
| 2026-09-20 11:58 UTC | netfilter: x_tables: avoid holding mutex over faultable user copies | 3 | zihanx@nebusec.ai | finished in 5h6m0s |
| 2026-09-20 09:31 UTC | ipvs: avoid stack overflow from recursive connection expiration | 3 | zihanx@nebusec.ai | finished in 5h25m0s |