| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-09-14 11:51 UTC | netfilter: nf_tables: skip expired catchall elements on insert and delete | 3 | ljp1205831794@gmail.com | finished in 5h33m0s |
| 2026-09-14 07:25 UTC | flow offload teardown when layer 2 roaming | 5 | julius@bairaktaris.de | finished in 4h52m0s |
| 2026-09-13 10:42 UTC | netfilter: flowtable: correct and advertise the vlan match | 2 | julius@bairaktaris.de | finished in 4h13m0s |
| 2026-09-12 03:56 UTC | ipvs: avoid stack overflow from recursive connection expiration | 1 | zihanx@nebusec.ai | finished in 5h53m0s |
| 2026-09-12 01:10 UTC | netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name | 1 | namangulati@google.com | finished in 4h0m0s |
| 2026-09-11 14:42 UTC | netfilter: conntrack: prevent nf_conntrack_buckets race condition | 1 | fmancera@suse.de | finished in 1h13m0s |
| 2026-09-10 20:02 UTC | netfilter: nft_synproxy: use the family-aware checksum helper | 1 | kmehltretter@gmail.com | finished in 3h59m0s |
| 2026-09-10 16:20 UTC | netfilter: flowtable: Saturate 16-bit flow_tuple->mtu | 1 | alice.kernel@fastmail.im | finished in 4h23m0s |
| 2026-09-10 10:54 UTC | netfilter: conntrack: make filtering by zone discoverable | 2 | i.maximets@ovn.org | finished in 4h35m0s |
| 2026-09-10 09:00 UTC | netfilter: offload a TCP flow whose reply is never seen | 1 | julius@bairaktaris.de | finished in 4h12m0s |
| 2026-09-10 08:33 UTC | netfilter: nft_flow_offload: drop flowtable reference on init error path | 1 | ljp1205831794@gmail.com | finished in 4h31m0s |
| 2026-09-10 08:03 UTC | netfilter: nf_tables: skip expired catchall elements on insert and delete | 2 | ljp1205831794@gmail.com | finished in 3h59m0s |
| 2026-09-09 14:49 UTC | netfilter: ctnetlink: fix inverted IPv6 address match in dump filter | 1 | piotr@kubik.pl | finished in 4h56m0s |
| 2026-09-09 14:36 UTC | netfilter: x_tables: avoid holding mutex over faultable user copies | 2 | zihanx@nebusec.ai | finished in 5h0m0s |
| 2026-09-09 08:17 UTC | netfilter: flowtable: check namespace before iterating flows | 1 | qingfang.deng@linux.dev | finished in 4h12m0s |
| 2026-09-08 12:32 UTC | netfilter: nf_tables: skip expired catchall elements in dedup walk | 1 | ljp1205831794@gmail.com | finished in 4h12m0s |
| 2026-09-07 09:52 UTC | netfilter: fix typos in comments | 2 | hemanth.selam@gmail.com | skipped |
| 2026-09-07 07:33 UTC | net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload | 2 | lorenzo.bianconi@oss.qualcomm.com | finished in 3h59m0s |
| 2026-09-07 06:42 UTC | net: fix typos in comments | 1 | hemanth.selam@gmail.com | skipped |
| 2026-09-07 00:31 UTC | netfilter: nf_conntrack_h323: fix OOB read in decode_enum() | 1 | elb12345@hotmail.co.uk | finished in 2h37m0s |
| 2026-09-06 23:37 UTC | netfilter: conntrack_amanda: fix port value truncation | 1 | elb12345@hotmail.co.uk | finished in 2h36m0s |
| 2026-09-06 23:37 UTC | netfilter: conntrack_irc: fix port value truncation in parse_dcc() | 1 | elb12345@hotmail.co.uk | finished in 2h36m0s |
| 2026-09-06 14:20 UTC | netfilter: flowtable: advertise the vlan match in used_keys | 1 | julius@bairaktaris.de | finished in 4h55m0s |
| 2026-09-06 14:19 UTC | netfilter: flowtable: advertise the vlan match in used_keys | 1 | julius@bairaktaris.de | finished in 4h36m0s |
| 2026-09-06 08:44 UTC | netfilter: ip6t_rpfilter: reject routes without inet6_dev | 2 | bestswngs@gmail.com | finished in 4h24m0s |
| 2026-09-06 07:54 UTC | netfilter: ip6t_rpfilter: reject routes without inet6_dev | 2 | bestswngs@gmail.com | finished in 4h34m0s |
| 2026-09-06 03:49 UTC | netfilter: ip6t_rpfilter: handle routes without inet6_dev | 1 | bestswngs@gmail.com | finished in 4h11m0s |
| 2026-09-04 17:44 UTC | netfilter: conntrack: make filtering by zone discoverable | 1 | i.maximets@ovn.org | finished in 50m0s |
| 2026-09-04 16:13 UTC | selftests: net: use KHDR_INCLUDES in CFLAGS | 1 | matttbe@kernel.org | skipped |
| 2026-09-04 11:45 UTC | net: netfilter: fix typo "specifiy" in comment | 1 | hemanth.selam@gmail.com | skipped |
| 2026-09-03 12:17 UTC | netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst | 1 | alexevgmart@gmail.com | skipped |
| 2026-09-03 12:10 UTC | net/ipv6: don't route packets with unknown source address | 2 | ihuguet@riseup.net | finished in 4h46m0s |
| 2026-09-03 11:55 UTC | netfilter: nf_dup: disable duplication in user namespaces | 2 | zihanx@nebusec.ai | finished in 3h2m0s |
| 2026-09-02 22:01 UTC | Change skb secmarks to x-array indexes | 2 | casey@schaufler-ca.com | finished in 4h33m0s |
| 2026-09-02 17:52 UTC | bpf: Fix socket leaks around connect(AF_UNSPEC)+listen() | 3 | mhal@rbox.co | finished in 4h2m0s |
| 2026-09-02 15:51 UTC | netfilter: flowtable: carry a priority into the offload | 2 | julius@bairaktaris.de | finished in 4h37m0s |
| 2026-09-01 16:32 UTC | net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload | 1 | lorenzo.bianconi@oss.qualcomm.com | finished in 4h3m0s |
| 2026-09-01 13:47 UTC | netfilter: x_tables: avoid holding mutex over faultable user copies | 1 | zihanx@nebusec.ai | finished in 4h22m0s |
| 2026-09-01 11:50 UTC | net/ipv6: don't route packets with unknown source address | 1 | ihuguet@riseup.net |
finished
in 4h11m0s
[2 findings] |
| 2026-09-01 09:26 UTC | netfilter: flowtable: carry a priority into the offload | 1 | julius@bairaktaris.de | finished in 4h18m0s |
| 2026-08-31 22:37 UTC | Change skb secmarks to x-array indexes | 1 | casey@schaufler-ca.com |
finished
in 1h50m0s
[1 findings] |
| 2026-08-31 19:49 UTC | netfilter: nft_set_pipapo: restore cloned mapping table memcg accounting | 1 | kmehltretter@gmail.com | skipped |
| 2026-08-31 18:07 UTC | netfilter: nf_tables: missing objects with no memcg accounting | 2 | kmehltretter@gmail.com | skipped |
| 2026-08-31 16:06 UTC | ipv4: start using dst_dev_rcu() | 1 | miguel.gazquez@bootlin.com | skipped |
| 2026-08-31 13:31 UTC | netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state | 1 | sashal@kernel.org | skipped |
| 2026-08-31 13:30 UTC | netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() | 1 | sashal@kernel.org | finished in 1h49m0s |
| 2026-08-31 13:30 UTC | netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths | 1 | sashal@kernel.org | skipped |
| 2026-08-31 13:30 UTC | netfilter: ipset: mark the rcu locked areas properly | 1 | sashal@kernel.org | skipped |
| 2026-08-31 13:29 UTC | netfilter: nf_conntrack_expect: zero at allocation time | 1 | sashal@kernel.org | skipped |
| 2026-08-31 04:37 UTC | netfilter: nft_set_pipapo: account mapping table allocation | 1 | kmehltretter@gmail.com | skipped |
| 2026-08-31 01:33 UTC | netfilter: nf_conntrack_h323: fix double cursor advance in decode_int() | 1 | l1138897701@163.com | finished in 2h6m0s |
| 2026-08-29 05:19 UTC | netfilter: nf_dup: prevent asynchronous duplicate recursion | 1 | zihanx@nebusec.ai | finished in 5h14m0s |
| 2026-08-27 10:32 UTC | netfilter: nf_tables: fix device name and prefix match in hook lookup | 4 | fmancera@suse.de | finished in 4h12m0s |
| 2026-08-26 13:32 UTC | netfilter: nf_tables: fix device name and prefix match in hook lookup | 3 | fmancera@suse.de | finished in 4h36m0s |
| 2026-08-25 20:02 UTC | netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race | 2 | blbllhy@gmail.com | finished in 4h5m0s |
| 2026-08-25 15:27 UTC | net: netfilter: report NLM_F_DUMP_FILTERED when all is filtered out | 1 | i.maximets@ovn.org | finished in 4h31m0s |
| 2026-08-24 12:12 UTC | netfilter: cttimeout: prevent UAF during module unload | 1 | nicoyip.dev@gmail.com | skipped |
| 2026-08-24 11:58 UTC | netfilter: flowtable: flush delete work after final GC | 1 | nicoyip.dev@gmail.com | finished in 5h1m0s |
| 2026-08-24 09:28 UTC | netfilter: nf_tables: fix device name and prefix match in hook lookup | 2 | fmancera@suse.de | finished in 4h18m0s |
| 2026-08-24 02:32 UTC | netfilter: nf_conntrack_h323: fix double cursor advance in decode_int() | 2 | l1138897701@163.com | finished in 2h24m0s |
| 2026-08-23 17:05 UTC | netfilter: nf_log: unregister loggers before per-net teardown | 2 | nicoyip.dev@gmail.com | skipped |
| 2026-08-22 21:40 UTC | netfilter: nf_conntrack: avoid truncating IPv6 nexthdr offset | 1 | jeremy.jean@oss.cyber.gouv.fr | finished in 4h25m0s |
| 2026-08-22 21:09 UTC | netfilter: bpf: disallow conntrack kfuncs for token programs | 1 | jeremy.jean@oss.cyber.gouv.fr | finished in 2h20m0s |
| 2026-08-22 18:46 UTC | netfilter: nf_log: clear per-net loggers on unregister | 1 | nicoyip.dev@gmail.com | skipped |
| 2026-08-21 13:33 UTC | ipv4: start using dst_dev_rcu() | 1 | miguel.gazquez@bootlin.com | skipped |
| 2026-08-21 09:50 UTC | netfilter: osf: remove unreachable break in nf_osf_ttl() | 2 | xiaolinkui@126.com | skipped |
| 2026-08-21 06:52 UTC | netfilter: nf_conntrack_h323: fix double cursor advance in decode_int() | 1 | l1138897701@163.com | finished in 2h18m0s |
| 2026-08-21 02:28 UTC | netfilter: osf: remove unreachable break in nf_osf_ttl() | 1 | xiaolinkui@126.com | skipped |
| 2026-08-20 12:57 UTC | netfilter: conntrack: fix nf_conntrack_expect_max default value in documentation | 1 | sunshaojie@kylinos.cn | skipped |
| 2026-08-20 01:06 UTC | netfilter: ipset: list:set: defer ip_set_put_byindex to RCU callback | 1 | blbllhy@gmail.com | finished in 4h27m0s |
| 2026-08-19 18:16 UTC | sysctl: add module aliases | 3 | mfo@igalia.com | skipped |
| 2026-08-19 02:28 UTC | sysctl: add module aliases | 2 | mfo@igalia.com | skipped |
| 2026-08-18 20:00 UTC | netfilter: flowtable: publish HW_DEAD after worker is done | 1 | jeremy.jean@oss.cyber.gouv.fr | finished in 4h19m0s |
| 2026-08-18 13:31 UTC | netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() | 3 | joasantonio108@gmail.com | finished in 2h36m0s |
| 2026-08-18 10:18 UTC | netfilter: nf_tables: fix device name and prefix match in hook lookup | 1 | fmancera@suse.de | finished in 4h52m0s |
| 2026-08-17 17:22 UTC | lib/folio_pool: Direct-Map Large Folio Pool & Scratchpad bump allocators | 1 | devnull@kernel.org |
finished
in 1h17m0s
[1 findings] |
| 2026-08-15 13:31 UTC | netfilter: nf_conntrack_sip: fix OOB read in ct_sip_parse_transport() | 1 | joasantonio108@gmail.com | finished in 2h24m0s |
| 2026-08-14 19:25 UTC | netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() | 2 | joasantonio108@gmail.com | skipped |
| 2026-08-14 19:17 UTC | netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() | 1 | joasantonio108@gmail.com | skipped |
| 2026-08-13 20:48 UTC | Change skb secmarks to x-array indexes | 1 | casey@schaufler-ca.com | finished in 5h7m0s |
| 2026-08-13 18:34 UTC | ipvs: fix integer overflow in ftp helper port/address parsing | 2 | joasantonio108@gmail.com | finished in 5h6m0s |
| 2026-08-13 16:59 UTC | ipvs: fix integer overflow in ftp helper port/address parsing | 1 | joasantonio108@gmail.com | finished in 1h20m0s |
| 2026-08-13 14:10 UTC | netfilter: nf_conntrack_h323: fix OOB read in get_bitmap() | 1 | joasantonio108@gmail.com | skipped |
| 2026-08-10 16:07 UTC | netfilter: nf_reject: initialize IPCB at inet ingress | 2 | david.lee@trailofbits.com | finished in 4h54m0s |
| 2026-08-10 13:01 UTC | net: sysctl: Const Qualify sysctl ctl_table arrays | 4 | joel.granados@kernel.org | finished in 4h5m0s |
| 2026-08-10 11:35 UTC | netfilter: nf_tables: don't queue packet path object notifications | 1 | littleddfu@gmail.com | finished in 4h18m0s |
| 2026-08-07 08:45 UTC | netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers | 4 | running910@gmail.com | finished in 4h18m0s |
| 2026-08-07 07:59 UTC | selftests: netfilter: conntrack_dump_flush: remove unused variables and fix typo | 2 | fffsqian@163.com | skipped |
| 2026-08-06 16:11 UTC | netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path | 1 | a.velichayshiy@ispras.ru | finished in 4h36m0s |
| 2026-08-06 07:50 UTC | selftests: netfilter: Remove unused variables in conntrack_dump_flush | 1 | fffsqian@163.com | skipped |
| 2026-08-05 08:53 UTC | net: pass net_device_path_ctx to dev_fill_forward_path() | 1 | lorenzo.bianconi@oss.qualcomm.com | finished in 4h6m0s |
| 2026-08-04 20:11 UTC | netfilter: nf_dup_netdev: scrub duplicates to preserve the direct path | 1 | alexandre.ferrieux@gmail.com | finished in 2h23m0s |
| 2026-08-04 09:51 UTC | netfilter: nf_reject_ipv4: initialize IPCB at inet ingress | 1 | david.lee@trailofbits.com | finished in 1h51m0s |
| 2026-08-04 09:33 UTC | netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() | 1 | edumazet@google.com | finished in 2h18m0s |
| 2026-08-04 06:10 UTC | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 2 | david.lee@trailofbits.com | finished in 1h24m0s |
| 2026-07-31 16:09 UTC | bpf: Fix netns reference imbalance in conntrack kfuncs | 3 | nicoyip.dev@gmail.com | finished in 2h12m0s |
| 2026-07-31 14:53 UTC | netfilter: conntrack: sctp: validate vtag before state changes | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h8m0s |
| 2026-07-31 14:27 UTC | ipvs: fix destination overload state updates | 4 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h28m0s |
| 2026-07-31 14:08 UTC | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 1 | david.lee@trailofbits.com | finished in 4h50m0s |
| 2026-07-31 14:08 UTC | netfilter: nf_conntrack: prevent helper extension relocation | 1 | david.lee@trailofbits.com | finished in 4h7m0s |