| 2026-08-13 20:48 UTC |
Change skb secmarks to x-array indexes |
1 |
casey@schaufler-ca.com |
finished
in 5h7m0s
|
| 2026-08-13 18:34 UTC |
ipvs: fix integer overflow in ftp helper port/address parsing |
2 |
joasantonio108@gmail.com |
finished
in 5h6m0s
|
| 2026-08-13 16:59 UTC |
ipvs: fix integer overflow in ftp helper port/address parsing |
1 |
joasantonio108@gmail.com |
finished
in 1h20m0s
|
| 2026-08-13 14:10 UTC |
netfilter: nf_conntrack_h323: fix OOB read in get_bitmap() |
1 |
joasantonio108@gmail.com |
skipped
|
| 2026-08-10 16:07 UTC |
netfilter: nf_reject: initialize IPCB at inet ingress |
2 |
david.lee@trailofbits.com |
finished
in 4h54m0s
|
| 2026-08-10 13:01 UTC |
net: sysctl: Const Qualify sysctl ctl_table arrays |
4 |
joel.granados@kernel.org |
finished
in 4h5m0s
|
| 2026-08-10 11:35 UTC |
netfilter: nf_tables: don't queue packet path object notifications |
1 |
littleddfu@gmail.com |
finished
in 4h18m0s
|
| 2026-08-07 08:45 UTC |
netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers |
4 |
running910@gmail.com |
finished
in 4h18m0s
|
| 2026-08-07 07:59 UTC |
selftests: netfilter: conntrack_dump_flush: remove unused variables and fix typo |
2 |
fffsqian@163.com |
skipped
|
| 2026-08-06 16:11 UTC |
netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path |
1 |
a.velichayshiy@ispras.ru |
finished
in 4h36m0s
|
| 2026-08-06 07:50 UTC |
selftests: netfilter: Remove unused variables in conntrack_dump_flush |
1 |
fffsqian@163.com |
skipped
|
| 2026-08-05 08:53 UTC |
net: pass net_device_path_ctx to dev_fill_forward_path() |
1 |
lorenzo.bianconi@oss.qualcomm.com |
finished
in 4h6m0s
|
| 2026-08-04 20:11 UTC |
netfilter: nf_dup_netdev: scrub duplicates to preserve the direct path |
1 |
alexandre.ferrieux@gmail.com |
finished
in 2h23m0s
|
| 2026-08-04 09:51 UTC |
netfilter: nf_reject_ipv4: initialize IPCB at inet ingress |
1 |
david.lee@trailofbits.com |
finished
in 1h51m0s
|
| 2026-08-04 09:33 UTC |
netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() |
1 |
edumazet@google.com |
finished
in 2h18m0s
|
| 2026-08-04 06:10 UTC |
ipvs: clear IPv4 options after rebasing tunnel ICMP errors |
2 |
david.lee@trailofbits.com |
finished
in 1h24m0s
|
| 2026-07-31 16:09 UTC |
bpf: Fix netns reference imbalance in conntrack kfuncs |
3 |
nicoyip.dev@gmail.com |
finished
in 2h12m0s
|
| 2026-07-31 14:53 UTC |
netfilter: conntrack: sctp: validate vtag before state changes |
1 |
zhaoyz24@mails.tsinghua.edu.cn |
finished
in 4h8m0s
|
| 2026-07-31 14:27 UTC |
ipvs: fix destination overload state updates |
4 |
zhaoyz24@mails.tsinghua.edu.cn |
finished
in 4h28m0s
|
| 2026-07-31 14:08 UTC |
ipvs: clear IPv4 options after rebasing tunnel ICMP errors |
1 |
david.lee@trailofbits.com |
finished
in 4h50m0s
|
| 2026-07-31 14:08 UTC |
netfilter: nf_conntrack: prevent helper extension relocation |
1 |
david.lee@trailofbits.com |
finished
in 4h7m0s
|
| 2026-07-30 08:29 UTC |
bpf: Fix netns reference imbalance in conntrack kfuncs |
2 |
nicoyip.dev@gmail.com |
finished
in 2h51m0s
|
| 2026-07-29 17:31 UTC |
netfilter: ebt_nflog: pin the NFLOG backend |
1 |
nicoyip.dev@gmail.com |
finished
in 2h16m0s
|
| 2026-07-29 16:31 UTC |
bpf: Fix netns reference imbalance in conntrack kfuncs |
1 |
nicoyip.dev@gmail.com |
finished
in 2h9m0s
|
| 2026-07-28 07:35 UTC |
netfilter: conntrack: sctp: verify vtag before state changes |
1 |
zhaoyz24@mails.tsinghua.edu.cn |
finished
in 4h49m0s
|
| 2026-07-27 19:41 UTC |
netfilter: conncount: normalize tuple and zone on successful ct lookup |
1 |
fmancera@suse.de |
finished
in 4h53m0s
|
| 2026-07-26 12:03 UTC |
net: flow_offload: serialize driver callback lists |
2 |
bestswngs@gmail.com |
finished
in 5h21m0s
|
| 2026-07-24 11:01 UTC |
netfilter: ip6tables: set hotdrop for malformed extension header matches |
3 |
running910@gmail.com |
finished
in 5h39m0s
|
| 2026-07-22 22:38 UTC |
netfilter: ipset: fix refcount race between list:set GC and swap |
1 |
xmei5@asu.edu |
finished
in 5h45m0s
|
| 2026-07-21 07:46 UTC |
netfilter: xt_hashlimit: fix uninitialized rateinfo.burst read on shared table |
1 |
talha.anything.info@gmail.com |
finished
in 6h8m0s
|
| 2026-07-19 22:15 UTC |
netfilter: nft_payload: fix mask build for partial field offload |
1 |
xmei5@asu.edu |
finished
in 5h1m0s
|
| 2026-07-16 14:07 UTC |
ipvs: use type-safe allocation helpers in ip_vs_rht_alloc |
1 |
subasris1210@gmail.com |
skipped
|
| 2026-07-15 14:48 UTC |
netfilter: conntrack: prevent helper extension relocation |
1 |
iostreampy@proton.me |
finished
in 4h53m0s
|
| 2026-07-14 03:21 UTC |
netfilter: ip6tables: set hotdrop for malformed extension header matches |
2 |
running910@gmail.com |
finished
in 5h27m0s
|
| 2026-07-13 18:36 UTC |
netfilter: nft_fib: bail out if input device is missing |
1 |
xmei5@asu.edu |
finished
in 5h11m0s
|
| 2026-07-13 16:33 UTC |
netfilter: ipset: skip extension destroy on hash resize replay |
3 |
bestswngs@gmail.com |
finished
in 5h12m0s
|
| 2026-07-13 16:15 UTC |
netfilter: ipset: skip extension destroy on hash resize replay |
2 |
bestswngs@gmail.com |
finished
in 55m0s
|
| 2026-07-13 12:53 UTC |
selftests: netfilter: nft_flowtable.sh: fix offload counter verification for tunnel tests |
2 |
lorenzo@kernel.org |
skipped
|
| 2026-07-13 12:46 UTC |
Add IPv4 over IPv6 and SIT flowtable SW acceleration |
6 |
lorenzo@kernel.org |
skipped
|
| 2026-07-13 11:07 UTC |
net: sysctl: Const Qualify sysctl ctl_table arrays |
3 |
joel.granados@kernel.org |
finished
in 5h22m0s
|
| 2026-07-13 09:59 UTC |
netfilter: ipset: do not update comments from kernel-side hash adds |
1 |
david.lee@trailofbits.com |
finished
in 5h33m0s
|
| 2026-07-13 09:48 UTC |
ipvs: fix destination overload state updates |
3 |
zhaoyz24@mails.tsinghua.edu.cn |
finished
in 4h28m0s
|
| 2026-07-12 23:42 UTC |
netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() |
1 |
xmei5@asu.edu |
finished
in 3h29m0s
|
| 2026-07-11 13:55 UTC |
selftests: netfilter: nft_flowtable.sh: check offload counters for IP6IP6 tunnel test |
1 |
lorenzo@kernel.org |
skipped
|
| 2026-07-10 13:27 UTC |
netfilter: nf_nat: recalculate TCP TS offset after SNAT port rewrite |
3 |
xietangxin@h-partners.com |
finished
in 4h51m0s
|
| 2026-07-09 13:12 UTC |
netfilter: nf_nat: recalculate TCP TS offset when snat change sport |
2 |
xietangxin@h-partners.com |
finished
in 4h57m0s
|
| 2026-07-09 08:52 UTC |
Add IPv4 over IPv6 and SIT flowtable SW acceleration |
5 |
lorenzo@kernel.org |
finished
in 5h8m0s
|
| 2026-07-09 06:30 UTC |
netfilter: ip6tables: set hotdrop for malformed extension header matches |
1 |
running910@gmail.com |
finished
in 5h17m0s
|
| 2026-07-08 18:11 UTC |
netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() |
2 |
xmei5@asu.edu |
finished
in 2h42m0s
|
| 2026-07-08 06:04 UTC |
ipvs: make destination flags atomic |
2 |
zhaoyz24@mails.tsinghua.edu.cn |
finished
in 5h24m0s
|
| 2026-07-08 05:27 UTC |
netfilter: nf_conncount: fix zone comparison in tuple dedup |
2 |
zhaoyz24@mails.tsinghua.edu.cn |
finished
in 5h7m0s
|
| 2026-07-07 19:51 UTC |
netfilter: replace u_int*_t with kernel int types (batch 3) |
1 |
carlos@carlosgrillet.me |
skipped
|
| 2026-07-07 11:00 UTC |
netfilter: ecache: fix inverted time_after() check |
1 |
zhaoyz24@mails.tsinghua.edu.cn |
finished
in 4h58m0s
|
| 2026-07-07 08:57 UTC |
ipvs: make destination flags atomic |
1 |
zhaoyz24@mails.tsinghua.edu.cn |
finished
in 4h58m0s
|
| 2026-07-07 07:38 UTC |
Revert "net: dsa: mt7530: untag VLAN-aware bridge PVID" |
1 |
ericwouds@gmail.com |
skipped
|
| 2026-07-06 23:28 UTC |
netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() |
1 |
xmei5@asu.edu |
finished
in 2h51m0s
|
| 2026-07-06 11:48 UTC |
netfilter: nf_conncount: fix zone comparison in tuple dedup |
1 |
zhaoyz24@mails.tsinghua.edu.cn |
finished
in 5h13m0s
|
| 2026-07-06 10:16 UTC |
ipvs: use parsed transport offsets in state handlers |
2 |
zhaoyz24@mails.tsinghua.edu.cn |
finished
in 5h28m0s
|
| 2026-07-05 23:36 UTC |
netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag |
1 |
xmei5@asu.edu |
finished
in 4h55m0s
|
| 2026-07-05 21:58 UTC |
netfilter: ebtables: terminate table name before find_table_lock() |
1 |
xmei5@asu.edu |
finished
in 4h26m0s
|
| 2026-07-05 12:56 UTC |
ipvs: skip IPv6 extension headers in TCP state lookup |
1 |
zhaoyz24@mails.tsinghua.edu.cn |
finished
in 4h25m0s
|
| 2026-07-05 12:30 UTC |
ipvs: skip IPv6 extension headers in SCTP state lookup |
1 |
zhaoyz24@mails.tsinghua.edu.cn |
finished
in 5h6m0s
|
| 2026-07-04 06:22 UTC |
netfilter: ipset: skip extension destroy on hash resize replay |
1 |
bestswngs@gmail.com |
finished
in 4h51m0s
|
| 2026-07-03 16:22 UTC |
netfilter: nft_lookup: fix catchall element handling with inverted lookups |
1 |
ty@000ty.net |
finished
in 4h0m0s
|
| 2026-07-03 14:10 UTC |
Add IPv4 over IPv6 and SIT flowtable SW acceleration |
4 |
lorenzo@kernel.org |
finished
in 4h55m0s
|
| 2026-07-02 11:28 UTC |
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new |
1 |
zhaoyz24@mails.tsinghua.edu.cn |
finished
in 2h39m0s
|
| 2026-07-02 10:10 UTC |
ipvs: Move defense_work and est_reload_work to system_dfl_long_wq |
2 |
iluceno@suse.de |
finished
in 1h34m0s
|
| 2026-07-02 07:34 UTC |
ipvs: fix PMTU for GUE/GRE tunnel ICMP errors |
2 |
zhaoyz24@mails.tsinghua.edu.cn |
finished
in 4h41m0s
|
| 2026-07-01 10:09 UTC |
netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop |
2 |
running910@gmail.com |
finished
in 30m0s
|
| 2026-07-01 06:59 UTC |
ipvs: fix PMTU for GUE/GRE tunnel ICMP errors |
1 |
zhaoyz24@mails.tsinghua.edu.cn |
finished
in 4h25m0s
|
| 2026-06-30 15:55 UTC |
netfilter: nft_set_rbtree: reject interval-end get for open intervals |
1 |
mlbnkm1@gmail.com |
finished
in 4h42m0s
|
| 2026-06-30 06:57 UTC |
netfilter: nf_flow_table_path: L2 bridge offload |
2 |
pawlik.dan@gmail.com |
finished
in 4h32m0s
|
| 2026-06-29 12:32 UTC |
netfilter: nf_flow_table_path: L2 bridge offload |
1 |
pawlik.dan@gmail.com |
finished
in 4h44m0s
|
| 2026-06-29 10:53 UTC |
netfilter: nft_fib: reject fib expression on the netdev egress hook |
2 |
theodorlarionov@gmail.com |
finished
in 4h11m0s
|
| 2026-06-29 09:33 UTC |
netfilter: nf_nat_masquerade: recalculate TCP TS offset when port is randomized |
1 |
xietangxin@h-partners.com |
finished
in 4h17m0s
|
| 2026-06-26 22:25 UTC |
netfilter: x_tables: replace strlcat() with snprintf() |
1 |
icb@fastmail.org |
skipped
|
| 2026-06-25 17:25 UTC |
netfilter: replace u_int*_t with kernel int types (batch 2) |
2 |
carlos@carlosgrillet.me |
skipped
|
| 2026-06-25 16:47 UTC |
netfilter: nf_log: validate MAC header was set before dumping it |
2 |
alexevgmart@gmail.com |
skipped
|
| 2026-06-25 13:31 UTC |
netfilter: remove redundant null check before kvfree() |
1 |
subasris1210@gmail.com |
skipped
|
| 2026-06-25 12:28 UTC |
netfilter: nft_fib: reject fib expression on the netdev egress hook |
1 |
theodorlarionov@gmail.com |
finished
in 4h14m0s
|
| 2026-06-25 01:00 UTC |
netfilter: ipset: fix race between dump and ip_set_list resize |
1 |
xmei5@asu.edu |
finished
in 4h33m0s
|
| 2026-06-24 18:40 UTC |
netfilter: replace u_int*_t with kernel int types (batch 2) |
1 |
carlos@carlosgrillet.me |
skipped
|
| 2026-06-21 18:49 UTC |
netfilter: TCPMSS: handle packets with unaligned MSS option |
3 |
kacper.kokot.44@gmail.com |
finished
in 4h2m0s
|
| 2026-06-18 12:58 UTC |
netfilter: ip6t_ah: validate AH header length |
1 |
running910@gmail.com |
finished
in 4h13m0s
|
| 2026-06-18 10:18 UTC |
bpf: Guard conntrack opts error writes |
2 |
chenyy23@mails.tsinghua.edu.cn |
finished
in 1h7m0s
|
| 2026-06-16 18:29 UTC |
netfilter: replace u_int*_t with kernel int types |
3 |
carlos@carlosgrillet.me |
finished
in 1h40m0s
|
| 2026-06-16 05:42 UTC |
bpf: Guard conntrack opts error writes |
1 |
chenyy23@mails.tsinghua.edu.cn |
finished
in 55m0s
|
| 2026-06-15 13:38 UTC |
netfilter: replace u_int*_t with kernel int types |
2 |
carlos@carlosgrillet.me |
finished
in 1h56m0s
|
| 2026-06-15 09:18 UTC |
netfilter: flowtable: fix and simplify IP6IP6 tunnel handling |
2 |
lorenzo@kernel.org |
finished
in 4h24m0s
|
| 2026-06-14 05:25 UTC |
netfilter: x_tables.h: fix all kernel-doc warnings |
1 |
rdunlap@infradead.org |
finished
in 1h34m0s
|
| 2026-06-11 04:21 UTC |
netfilter: nft_synproxy: stop bypassing the priv->info snapshot |
1 |
runyu.xiao@seu.edu.cn |
finished
in 4h54m0s
|
| 2026-06-10 10:39 UTC |
netfilter: fix two remaining stale-stack register leaks |
2 |
d.ornaghi97@gmail.com |
finished
in 4h27m0s
|
| 2026-06-09 22:55 UTC |
netfilter: nf_log: validate MAC header was set before dumping it |
2 |
xmei5@asu.edu |
finished
in 4h18m0s
|
| 2026-06-09 16:32 UTC |
netfilter: fix two remaining stale-stack register leaks |
1 |
d.ornaghi97@gmail.com |
finished
in 4h41m0s
|
| 2026-06-08 17:06 UTC |
netfilter: flowtable: use pskb_may_pull() in nf_flow_ip6_tunnel_proto() |
1 |
lorenzo@kernel.org |
finished
in 4h21m0s
|
| 2026-06-08 12:33 UTC |
netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() |
2 |
lorenzo@kernel.org |
finished
in 4h19m0s
|
| 2026-06-08 09:54 UTC |
net/netfilter/nfnetlink_cttimeout: Use strscpy() to copy strings into arrays |
1 |
david.laight.linux@gmail.com |
finished
in 4h58m0s
|
| 2026-06-08 00:11 UTC |
netfilter: nf_log: validate MAC header was set before dumping it |
1 |
xmei5@asu.edu |
finished
in 4h5m0s
|
| 2026-06-07 16:44 UTC |
netfilter: synproxy: fix unaligned access to TCP timestamp option |
1 |
rosenp@gmail.com |
finished
in 4h24m0s
|
| 2026-06-06 20:26 UTC |
net/netfilter/xt_recent: Use strscpy() to copy device name |
1 |
david.laight.linux@gmail.com |
finished
in 4h44m0s
|