| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-04-02 18:21 UTC | netfilter: xt_multiport: validate range encoding in checkentry | 3 | n05ec@lzu.edu.cn | - |
| 2026-04-02 17:34 UTC | netfilter: xt_multiport: validate range encoding in checkentry | 2 | n05ec@lzu.edu.cn | - |
| 2026-04-02 14:46 UTC | ipvs: fix MTU check for GSO packets in tunnel mode | 3 | 342144303@qq.com | in progress |
| 2026-04-02 12:09 UTC | ipvs: fix MTU check for GSO packets in tunnel mode | 2 | 342144303@qq.com |
finished
in 1h15m0s
[1 findings] |
| 2026-04-02 11:44 UTC | xfrm: hold dev ref until after transport_finish NF_HOOK | 3 | tpluszz77@gmail.com | in progress |
| 2026-04-02 11:31 UTC | xfrm: Wait for RCU readers during policy netns exit | 1 | steffen.klassert@secunet.com | in progress |
| 2026-04-01 21:20 UTC | netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator | 2 | xmei5@asu.edu | finished in 4h16m0s |
| 2026-04-01 19:57 UTC | netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator | 1 | xmei5@asu.edu | finished in 4h28m0s |
| 2026-04-01 15:38 UTC | ipvs: fix MTU check for GSO packets in tunnel mode | 1 | 342144303@qq.com | finished in 4h32m0s |
| 2026-04-01 11:02 UTC | netfilter: nft_set_pipapo_avx2: restore performance optimization | 1 | fw@strlen.de | finished in 4h36m0s |
| 2026-04-01 10:36 UTC | Netfilter fixes for net | 1 | pablo@netfilter.org | finished in 4h32m0s |
| 2026-04-01 07:58 UTC | ipvs: fix NULL deref in ip_vs_add_service error path | 2 | bestswngs@gmail.com | finished in 4h54m0s |
| 2026-04-01 07:44 UTC | Deprecate Legacy IP | 1 | dwmw2@infradead.org |
finished
in 3h0m0s
[1 findings] |
| 2026-04-01 04:16 UTC | ipvs: fix NULL deref in ip_vs_add_service error path | 1 | bestswngs@gmail.com | finished in 4h32m0s |
| 2026-03-31 21:41 UTC | netfilter: nf_tables: reject immediate NF_QUEUE verdict | 1 | pablo@netfilter.org | finished in 4h17m0s |
| 2026-03-31 21:13 UTC | netfilter: x_tables: ensure names are nul-terminated | 2 | fw@strlen.de | finished in 4h48m0s |
| 2026-03-31 15:01 UTC | netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP | 1 | pablo@netfilter.org | finished in 4h38m0s |
| 2026-03-31 07:34 UTC | netfilter: ip6t_eui64: validate MAC header before using it | 1 | n05ec@lzu.edu.cn | finished in 2h38m0s |
| 2026-03-31 06:17 UTC | netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent | 2 | tpluszz77@gmail.com | finished in 4h8m0s |
| 2026-03-31 06:14 UTC | netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent | 2 | tpluszz77@gmail.com | finished in 4h16m0s |
| 2026-03-30 21:39 UTC | netfilter: ipset: drop logically empty buckets in mtype_del | 1 | yuantan098@gmail.com | finished in 4h20m0s |
| 2026-03-30 12:16 UTC | netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr | 1 | fw@strlen.de | finished in 4h27m0s |
| 2026-03-30 11:40 UTC | netfilter: ctnetlink: disallow explicit helper on new expectations | 1 | pablo@netfilter.org | finished in 4h10m0s |
| 2026-03-30 11:35 UTC | selftests: netfilter: conntrack_sctp_collision.sh: Introduce SCTP INIT collision test | 1 | yiche@redhat.com | finished in 1h20m0s |
| 2026-03-29 16:52 UTC | netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent | 1 | tpluszz77@gmail.com | finished in 4h21m0s |
| 2026-03-29 16:51 UTC | netfilter: ctnetlink: validate expect class against master helper | 1 | tpluszz77@gmail.com | finished in 4h15m0s |
| 2026-03-29 16:50 UTC | netfilter: nf_conntrack_helper: pass helper to expect cleanup | 1 | tpluszz77@gmail.com | finished in 4h27m0s |
| 2026-03-29 13:40 UTC | netfilter: x_tables: ensure names are nul-terminated | 1 | fw@strlen.de | finished in 4h22m0s |
| 2026-03-28 19:42 UTC | netfilter: nft_compat: tighten the nft_compat interface | 1 | fw@strlen.de | finished in 4h15m0s |
| 2026-03-28 14:51 UTC | netfilter: xt_multiport: reject trailing range markers | 2 | n05ec@lzu.edu.cn | finished in 4h8m0s |
| 2026-03-26 20:18 UTC | netfilter: nf_conntrack_h323: Correct indentation when H323_TRACE defined | 1 | david.laight.linux@gmail.com | finished in 1h22m0s |
| 2026-03-26 20:09 UTC | netfilter: flowtable: strictly check for maximum number of actions | 1 | pablo@netfilter.org | finished in 4h24m0s |
| 2026-03-26 15:17 UTC | netfilter: nfnetlink_log: account for netlink header size | 1 | fw@strlen.de | finished in 4h25m0s |
| 2026-03-26 14:42 UTC | netfilter: Kconfig: make NF_FLOW_TABLE_INET depend on NF_TABLES_INET | 1 | fmancera@suse.de | finished in 1h57m0s |
| 2026-03-25 16:41 UTC | netfilter: nf_tables: reject requests exceeding NF_FLOW_RULE_ACTION_MAX actions | 1 | fw@strlen.de | finished in 4h19m0s |
| 2026-03-25 13:10 UTC | netfilter: updates for net | 1 | fw@strlen.de | finished in 4h23m0s |
| 2026-03-24 20:40 UTC | Update (DSA) netdev stats with offloaded flows | 2 | anzaki@gmail.com | finished in 4h39m0s |
| 2026-03-24 17:12 UTC | netfilter: ctnetlink: use netlink policy range checks | 1 | devnexen@gmail.com | finished in 4h20m0s |
| 2026-03-24 16:30 UTC | netfilter: conntrack: clamp TCP window scale to TCP_MAX_WSCALE via ctnetlink | 1 | devnexen@gmail.com | finished in 4h25m0s |
| 2026-03-24 15:18 UTC | ipvs: Fix incorrect use of HK_TYPE_KTHREAD housekeeping cpumask | 1 | longman@redhat.com | finished in 4h34m0s |
| 2026-03-23 16:25 UTC | IPVS changes, part 4 of 4 - extras | 1 | ja@ssi.bg | finished in 4h37m0s |
| 2026-03-23 08:56 UTC | netfilter: osf: add deprecation notices | 1 | fw@strlen.de | finished in 4h29m0s |
| 2026-03-23 08:07 UTC | netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp | 1 | bestswngs@gmail.com | finished in 2h1m0s |
| 2026-03-20 15:19 UTC | netfilter: nfnetlink_hook: Dump nat type chains | 2 | phil@nwl.cc | finished in 4h26m0s |
| 2026-03-20 15:16 UTC | mnl: Fix ordering of hooks in 'list hooks' output | 1 | phil@nwl.cc | skipped |
| 2026-03-20 12:59 UTC | conntrack expectation fixes | 1 | pablo@netfilter.org |
finished
in 57m0s
[1 findings] |
| 2026-03-19 09:38 UTC | netfilter: updates for net | 1 | fw@strlen.de | finished in 4h11m0s |
| 2026-03-18 13:42 UTC | netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow | 1 | fw@strlen.de | finished in 4h27m0s |
| 2026-03-18 13:38 UTC | netfilter: nft_set_pipapo: increment data in one step | 1 | fw@strlen.de | finished in 4h14m0s |
| 2026-03-18 13:24 UTC | netfilter: nft_set_pipapo_avx2: don't return non-matching entry | 1 | fw@strlen.de | finished in 4h15m0s |
| 2026-03-17 23:48 UTC | Update netdev stats with offloaded flows | 1 | anzaki@gmail.com | finished in 4h3m0s |
| 2026-03-17 14:00 UTC | ipvs: Move defense_work to system_dfl_long_wq | 1 | iluceno@suse.de |
finished
in 1h11m0s
[1 findings] |
| 2026-03-17 11:49 UTC | netfilter: bpf: defer hook memory release until rcu readers are done | 1 | fw@strlen.de | finished in 1h8m0s |
| 2026-03-17 11:03 UTC | bridge: No DEV_PATH_BR_VLAN_UNTAG_HW for dsa foreign | 12 | ericwouds@gmail.com | finished in 4h23m0s |
| 2026-03-17 10:17 UTC | bridge: Introduce DEV_PATH_BR_VLAN_KEEP_HW | 12 | ericwouds@gmail.com | skipped |
| 2026-03-17 10:15 UTC | netfilter: nft_flow_offload: Add DEV_PATH_MTK_WDMA to nft_dev_path_info() | 12 | ericwouds@gmail.com | finished in 2h3m0s |
| 2026-03-16 08:14 UTC | netfilter: add more netlink-based policy range checks | 1 | fw@strlen.de | finished in 4h1m0s |
| 2026-03-15 17:06 UTC | netfilter: add missing kernel-doc parameters for nf_hook() | 2 | xaum.io@gmail.com | finished in 4h30m0s |
| 2026-03-13 20:13 UTC | netfilter: nf_nat_sip: validate exp->dir in nf_nat_sip_expected() | 1 | qguanni@gmail.com | finished in 1h52m0s |
| 2026-03-13 19:52 UTC | netfilter: nf_conntrack_sip: add bounds-checked port parsing helper | 2 | qguanni@gmail.com | finished in 1h0m0s |
| 2026-03-13 18:01 UTC | netfilter: ipset: harden payload calculation in call_ad() | 1 | davidbaum461@gmail.com | finished in 4h25m0s |
| 2026-03-13 15:32 UTC | netfilter: nfnetlink_hook: Dump nat type chains | 1 | phil@nwl.cc | finished in 4h14m0s |
| 2026-03-13 15:06 UTC | netfilter: updates for net | 1 | fw@strlen.de | finished in 4h14m0s |
| 2026-03-12 22:31 UTC | netfilter: conntrack: expose gc_scan_interval_max via sysctl | 2 | panchamukhi@arista.com | finished in 4h12m0s |
| 2026-03-12 18:51 UTC | netfilter: nfnetlink_queue: prefer skb_mac_header helpers | 1 | fw@strlen.de | finished in 4h17m0s |
| 2026-03-12 18:05 UTC | netfilter: add deprecation warning for dccp support | 1 | fw@strlen.de | finished in 4h7m0s |
| 2026-03-12 17:56 UTC | netfilter: nf_conntrack_sip: remove net variable shadowing | 1 | fw@strlen.de | finished in 2h23m0s |
| 2026-03-12 17:55 UTC | netfilter: nf_conntrack_h323: remove unreliable debug code in decode_octstr | 1 | fw@strlen.de | finished in 1h15m0s |
| 2026-03-12 14:59 UTC | netfilter: xt_time: use unsigned int for monthday bit shift | 1 | qguanni@gmail.com | finished in 1h8m0s |
| 2026-03-12 14:55 UTC | netfilter: nf_conntrack_sip: fix OOB read in SIP URI port parsing | 1 | qguanni@gmail.com | finished in 58m0s |
| 2026-03-12 14:49 UTC | netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() | 1 | qguanni@gmail.com | finished in 2h2m0s |
| 2026-03-12 10:11 UTC | nf_tables: nft_dynset: fix possible stateful expression memleak in error path | 1 | pablo@netfilter.org | finished in 4h10m0s |
| 2026-03-12 01:14 UTC | netfilter: nft_set_rbtree: revisit array resize logic | 1 | pablo@netfilter.org | skipped |
| 2026-03-11 19:40 UTC | netfilter: conntrack: expose gc_scan_interval_max via sysctl | 1 | panchamukhi@arista.com | finished in 4h4m0s |
| 2026-03-11 19:33 UTC | cache: Fix for multiple commands in a single batch | 1 | phil@nwl.cc | skipped |
| 2026-03-11 17:52 UTC | parser_bison: add range check for synproxy wscale | 1 | fw@strlen.de | skipped |
| 2026-03-11 15:29 UTC | netfilter: revert nft_set_rbtree: validate open interval overlap | 1 | fw@strlen.de | finished in 4h1m0s |
| 2026-03-11 09:58 UTC | netfilter: nft_meta: add double-tagged vlan and pppoe support | 1 | pablo@netfilter.org | finished in 4h3m0s |
| 2026-03-11 05:19 UTC | udp: Retire UDP-Lite. | 3 | kuniyu@google.com | finished in 4h24m0s |
| 2026-03-10 21:49 UTC | netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() | 1 | research@johannes-moeller.dev | finished in 1h32m0s |
| 2026-03-10 14:39 UTC | netfilter: nf_flow_table_ip: reset mac header before vlan push | 1 | ericwouds@gmail.com | finished in 4h12m0s |
| 2026-03-10 13:28 UTC | netfilter: conntrack: add missing netlink policy validations | 1 | fw@strlen.de | finished in 4h18m0s |
| 2026-03-10 13:20 UTC | netfilter: updates for net | 2 | fw@strlen.de | finished in 4h6m0s |
| 2026-03-09 21:08 UTC | netfilter: updates for net | 1 | fw@strlen.de | finished in 4h3m0s |
| 2026-03-09 20:29 UTC | netfilter: nf_tables: Fix typo in enum description | 1 | jelle@vdwaa.nl | finished in 1h3m0s |
| 2026-03-09 15:56 UTC | mptcp: autotune related improvement | 1 | matttbe@kernel.org | finished in 3h53m0s |
| 2026-03-09 15:45 UTC | tests: add a wrapper for the filter test case | 1 | fw@strlen.de | finished in 54m0s |
| 2026-03-09 15:45 UTC | tests: test_api: expose return value and fix various bugs | 1 | fw@strlen.de | skipped |
| 2026-03-09 15:40 UTC | tests: shell: add rbtree reload test case | 1 | fw@strlen.de | finished in 58m0s |
| 2026-03-08 15:52 UTC | netfilter: guard option walkers against 1-byte tail reads | 3 | monderasdor@gmail.com | finished in 39m0s |
| 2026-03-08 11:25 UTC | netfilter: xtables: fix possible off-by-one when accessing TCP/DCCP options | 1 | pablo@netfilter.org | finished in 4h2m0s |
| 2026-03-07 18:45 UTC | netfilter: guard option walkers against 1-byte tail reads | 2 | monderasdor@gmail.com | finished in 41m0s |
| 2026-03-07 18:26 UTC | netfilter: guard option walkers against 1-byte tail reads | 1 | monderasdor@gmail.com | finished in 43m0s |
| 2026-03-07 17:24 UTC | netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path | 1 | imv4bel@gmail.com | finished in 3h58m0s |
| 2026-03-07 17:23 UTC | netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() | 1 | imv4bel@gmail.com | finished in 4h4m0s |
| 2026-03-07 17:23 UTC | netfilter: nf_flow_table_offload: fix heap overflow in flow_action_entry_next() | 1 | imv4bel@gmail.com | finished in 4h7m0s |
| 2026-03-07 17:22 UTC | netfilter: nf_conntrack_sctp: validate state value in nlattr_to_sctp() | 1 | imv4bel@gmail.com | finished in 4h13m0s |
| 2026-03-07 17:22 UTC | netfilter: ctnetlink: validate CTA_EXPECT_NAT_DIR to prevent OOB access | 1 | imv4bel@gmail.com | finished in 3h56m0s |
| 2026-03-07 17:21 UTC | netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() | 1 | imv4bel@gmail.com | finished in 3h59m0s |
| 2026-03-07 17:21 UTC | netfilter: ctnetlink: fix use-after-free of exp->master in single expectation GET | 1 | imv4bel@gmail.com | finished in 4h8m0s |