| 2026-10-02 08:42 UTC |
netfilter: flowtable: use the vlan id, not the full tci, in the tuple key |
1 |
huangya90@gmail.com |
-
|
| 2026-10-01 18:02 UTC |
netfilter: conntrack: avoid recursive master destruction |
1 |
4ncienth@gmail.com |
-
|
| 2026-10-01 12:06 UTC |
netfilter: do not assume skb->sk is inet sk |
1 |
fw@strlen.de |
in progress
|
| 2026-09-30 20:54 UTC |
netfilter: ip6t_NPT: ensure skb is writable before header modification |
2 |
joasantonio108@gmail.com |
skipped
|
| 2026-09-30 18:09 UTC |
netfilter: ip6t_NPT: ensure skb is writable before header modification |
1 |
joasantonio108@gmail.com |
skipped
|
| 2026-09-30 07:14 UTC |
net: bridge: vlan: optimize standard fdb fwding path |
1 |
razor@blackwall.org |
finished
in 4h6m0s
|
| 2026-09-29 14:59 UTC |
netfilter: nf_tables: switch chain_types array to rcu |
1 |
fw@strlen.de |
finished
in 4h11m0s
|
| 2026-09-29 13:09 UTC |
netfilter: conntrack: fix unlikely UaF in gc worker |
1 |
fw@strlen.de |
finished
in 4h52m0s
|
| 2026-09-29 12:58 UTC |
netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns |
5 |
zihanx@nebusec.ai |
finished
in 4h6m0s
|
| 2026-09-29 11:34 UTC |
ipvs: read conn fields during sync atomically |
2 |
ja@ssi.bg |
finished
in 4h25m0s
|
| 2026-09-29 09:00 UTC |
netfilter: nf_conntrack_reasm: avoid truncating header offset |
1 |
tjdqudcks0424@naver.com |
finished
in 3h46m0s
|
| 2026-09-28 18:58 UTC |
netfilter: nf_queue: limit the hook drop flush to the unregistered hook point |
2 |
aojea@google.com |
finished
in 3h46m0s
|
| 2026-09-28 17:33 UTC |
netfilter: conntrack: shared port parser for helpers |
5 |
rc@rexion.ai |
finished
in 3h51m0s
|
| 2026-09-28 16:18 UTC |
netfilter: br_netfilter: restore VLAN tag on refragmented IPv6 packets |
1 |
parri.andrea@gmail.com |
finished
in 4h0m0s
|
| 2026-09-28 12:46 UTC |
net: cap skb->queue_mapping when the tx queue is picked |
4 |
jhs@mojatatu.com |
finished
in 1h5m0s
|
| 2026-09-28 08:28 UTC |
netfilter: ebtables: ebt_802_3: drop short frames before the match reads LLC |
1 |
guozh23@xiaopeng.com |
finished
in 2h26m0s
|
| 2026-09-27 22:34 UTC |
Netfilter updates for net-next |
1 |
pablo@netfilter.org |
finished
in 4h4m0s
|
| 2026-09-27 22:08 UTC |
Netfilter/IPVS fixes for net |
1 |
pablo@netfilter.org |
finished
in 4h16m0s
|
| 2026-09-27 16:32 UTC |
netfilter: flowtable: flush delete work after final GC |
2 |
nicoyip.dev@gmail.com |
finished
in 4h5m0s
|
| 2026-09-27 07:15 UTC |
netfilter: nf_tables: serialize offload stats with callback unbind |
1 |
nicoyip.dev@gmail.com |
finished
in 5h5m0s
|
| 2026-09-27 06:24 UTC |
ipvs: fix protocol data lifetime during namespace teardown |
1 |
nicoyip.dev@gmail.com |
finished
in 1h55m0s
|
| 2026-09-27 04:31 UTC |
netfilter: x_tables: avoid holding mutex over faultable user copies |
4 |
zihanx@nebusec.ai |
finished
in 4h6m0s
|
| 2026-09-26 20:45 UTC |
netfilter: ip6t_SYNPROXY: check TCP header before verifying checksum |
1 |
raghunathpalla.0209@gmail.com |
finished
in 3h49m0s
|
| 2026-09-26 18:23 UTC |
net: validate malformed IPv6 and TCP headers |
1 |
weir@nebusec.ai |
finished
in 4h14m0s
|
| 2026-09-26 17:52 UTC |
netfilter: conntrack: wait for RCU readers before freeing the hash |
1 |
nicoyip.dev@gmail.com |
finished
in 4h7m0s
|
| 2026-09-26 17:51 UTC |
ipvs: Defer application parent freeing until after RCU readers |
1 |
nicoyip.dev@gmail.com |
finished
in 4h2m0s
|
| 2026-09-26 17:37 UTC |
net: neighbour: Serialize proxy queue admission |
1 |
nicoyip.dev@gmail.com |
finished
in 4h10m0s
|
| 2026-09-26 09:19 UTC |
netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns |
4 |
zihanx@nebusec.ai |
finished
in 3h59m0s
|
| 2026-09-25 19:36 UTC |
ipvs: wait grace period while reusing dest from trash |
2 |
weir@nebusec.ai |
finished
in 3h56m0s
|
| 2026-09-25 16:40 UTC |
ipvs: avoid stack overflow from recursive connection expiration |
5 |
zihanx@nebusec.ai |
finished
in 3h58m0s
|
| 2026-09-25 14:11 UTC |
ipvs: fix OOB write when NATing ICMPv6 errors quoting non-first fragments |
1 |
axel.mierczuk@1password.com |
finished
in 4h19m0s
|
| 2026-09-25 14:11 UTC |
ipvs: keep templates and cport 0 conns away from packet lookups |
1 |
axel.mierczuk@1password.com |
finished
in 4h0m0s
|
| 2026-09-25 13:51 UTC |
expr: add support to math expression |
5 |
fmancera@suse.de |
skipped
|
| 2026-09-25 13:49 UTC |
netfilter: nf_tables: add math expression support |
6 |
fmancera@suse.de |
finished
in 2h24m0s
|
| 2026-09-25 06:03 UTC |
seg6: add support for the SRv6 End.MAP behavior |
4 |
yuya.kusakabe@gmail.com |
finished
in 3h46m0s
|
| 2026-09-24 20:25 UTC |
netfilter: nf_flow_table_bpf: populate VLAN encap in XDP flowtable lookup |
1 |
adrianox@gmail.com |
finished
in 3h18m0s
|
| 2026-09-24 20:13 UTC |
netfilter: nft_reject: prevent unbounded recursion in output hooks |
3 |
fmancera@suse.de |
finished
in 4h0m0s
|
| 2026-09-23 12:27 UTC |
netfilter: conntrack: add and use nf_ct_get_real() |
2 |
fw@strlen.de |
finished
in 4h1m0s
|
| 2026-09-23 10:54 UTC |
netfilter: conntrack: add and use nf_ct_get_real() |
1 |
fw@strlen.de |
finished
in 4h17m0s
|
| 2026-09-23 09:54 UTC |
ipvs: avoid stack overflow from recursive connection expiration |
4 |
zihanx@nebusec.ai |
finished
in 4h18m0s
|
| 2026-09-23 04:23 UTC |
netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode |
1 |
subhampal789@gmail.com |
skipped
|
| 2026-09-22 19:18 UTC |
netfilter: bpf: reject invalid NAT manipulation types |
1 |
fmancera@suse.de |
finished
in 4h4m0s
|
| 2026-09-22 17:39 UTC |
netfilter: ecache: bound destroy event redelivery |
1 |
weir@nebusec.ai |
finished
in 3h46m0s
|
| 2026-09-22 16:40 UTC |
netfilter: nft_nat: use the right enum members for nat type switch |
1 |
fmancera@suse.de |
finished
in 1h3m0s
|
| 2026-09-22 09:52 UTC |
netfilter: nf_dup: disable duplication in user namespaces |
3 |
zihanx@nebusec.ai |
finished
in 5h23m0s
|
| 2026-09-22 09:25 UTC |
netfilter: nft_reject: prevent unbounded recursion in output hooks |
2 |
fmancera@suse.de |
finished
in 4h33m0s
|
| 2026-09-22 09:08 UTC |
ipvs: skip committing sync_threshold when proc_dointvec fails |
1 |
joel.granados@kernel.org |
finished
in 4h0m0s
|
| 2026-09-22 03:03 UTC |
net: prevent partial checksums from modifying network headers |
6 |
habte.yibelo@gmail.com |
finished
in 4h2m0s
|
| 2026-09-21 22:29 UTC |
netfilter: nft_reject: prevent unbounded recursion in output hooks |
1 |
fmancera@suse.de |
finished
in 4h3m0s
|
| 2026-09-21 20:57 UTC |
ipvs: add per-service secure_tcp |
5 |
adrianox@gmail.com |
finished
in 3h58m0s
|
| 2026-09-21 20:44 UTC |
xfrm: state: exact mark/mask match for control-plane SA lookups |
3 |
antony.antony@secunet.com |
finished
in 4h12m0s
|
| 2026-09-21 14:55 UTC |
ovs, net/sched: fixes for UAF after conntrack extension realloc |
1 |
i.maximets@ovn.org |
finished
in 4h24m0s
|
| 2026-09-21 13:03 UTC |
netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets |
2 |
lvjunyu@cmss.chinamobile.com |
finished
in 4h1m0s
|
| 2026-09-21 02:53 UTC |
net: prevent partial checksums from modifying network headers |
5 |
habte.yibelo@gmail.com |
finished
in 3h47m0s
|
| 2026-09-21 02:08 UTC |
netfilter: nft_set_rbtree: skip transaction elements during GC |
1 |
bestswngs@gmail.com |
finished
in 4h20m0s
|
| 2026-09-20 11:58 UTC |
netfilter: x_tables: avoid holding mutex over faultable user copies |
3 |
zihanx@nebusec.ai |
finished
in 5h6m0s
|
| 2026-09-20 09:31 UTC |
ipvs: avoid stack overflow from recursive connection expiration |
3 |
zihanx@nebusec.ai |
finished
in 5h25m0s
|
| 2026-09-20 07:45 UTC |
netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets |
1 |
lvjunyu@cmss.chinamobile.com |
finished
in 4h14m0s
|
| 2026-09-20 05:47 UTC |
ipvs: add per-service secure_tcp |
4 |
adrianox@gmail.com |
finished
in 3h51m0s
|
| 2026-09-19 21:52 UTC |
netfilter: nf_nat: fix unsigned range_size underflow for ICMP and GRE when max < min |
1 |
benquike@gmail.com |
finished
in 4h12m0s
|
| 2026-09-19 21:52 UTC |
netfilter: nfnetlink_log: fix config error handling, SIT headroom OOB read, and nlmsg rollback |
1 |
benquike@gmail.com |
finished
in 4h4m0s
|
| 2026-09-19 18:07 UTC |
ipvs: filter some connection flags |
2 |
ja@ssi.bg |
finished
in 4h1m0s
|
| 2026-09-19 03:34 UTC |
netfilter: nf_tables: defer object destruction on abort past commit_mutex |
2 |
ngocthang2710.1999@gmail.com |
finished
in 4h33m0s
|
| 2026-09-19 03:29 UTC |
netfilter: nf_tables: defer object destruction on abort past commit_mutex |
1 |
ngocthang2710.1999@gmail.com |
finished
in 4h34m0s
|
| 2026-09-18 18:31 UTC |
selftests: netfilter: nft_queue.sh: only queue icmp echo request/reply |
1 |
kuba@kernel.org |
skipped
|
| 2026-09-18 14:58 UTC |
netfilter: harden conntrack vs ingress pipeline rewrites |
3 |
fw@strlen.de |
finished
in 1h44m0s
|
| 2026-09-18 09:26 UTC |
netfilter: nf_ip6_checksum: validate checksum offset |
1 |
weir@nebusec.ai |
finished
in 4h25m0s
|
| 2026-09-18 06:18 UTC |
netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers |
5 |
running910@gmail.com |
finished
in 3h54m0s
|
| 2026-09-17 13:09 UTC |
netfilter: harden conntrack vs ingress pipeline rewrites |
2 |
fw@strlen.de |
finished
in 4h44m0s
|
| 2026-09-17 08:29 UTC |
net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload |
3 |
lorenzo.bianconi@oss.qualcomm.com |
finished
in 3h46m0s
|
| 2026-09-17 03:02 UTC |
ipvs: avoid stack overflow from recursive connection expiration |
2 |
zihanx@nebusec.ai |
finished
in 4h11m0s
|
| 2026-09-17 02:17 UTC |
selftests: net: update netfilter netlink config |
1 |
hangbin.liu@linux.dev |
skipped
|
| 2026-09-16 23:16 UTC |
Netfilter/IPVS fixes for net |
1 |
pablo@netfilter.org |
finished
in 4h6m0s
|
| 2026-09-16 22:00 UTC |
netfilter: nfnetlink_queue: hash queue instance by portid too |
1 |
pablo@netfilter.org |
finished
in 4h22m0s
|
| 2026-09-16 21:38 UTC |
seg6: add support for the SRv6 End.MAP behavior |
3 |
yuya.kusakabe@gmail.com |
finished
in 4h6m0s
|
| 2026-09-16 20:50 UTC |
ipvs: add per-service secure_tcp |
3 |
adrianox@gmail.com |
finished
in 4h19m0s
|
| 2026-09-16 12:51 UTC |
ipset: replace internal hash table with rhashtable |
5 |
fw@strlen.de |
finished
in 4h15m0s
|
| 2026-09-16 07:36 UTC |
netfilter: nf_dup_netdev: Fix net_device reference leak in nft_fwd_dup_netdev_offload() |
1 |
vulab@iscas.ac.cn |
finished
in 4h51m0s
|
| 2026-09-16 07:18 UTC |
tests: shell: add packetpath test for nat on loopback |
1 |
fw@strlen.de |
skipped
|
| 2026-09-14 16:58 UTC |
netfilter: nf_conntrack: validate skb->_nfct and packet headers |
1 |
fw@strlen.de |
finished
in 1h33m0s
|
| 2026-09-14 11:51 UTC |
netfilter: nf_tables: skip expired catchall elements on insert and delete |
3 |
ljp1205831794@gmail.com |
finished
in 5h33m0s
|
| 2026-09-14 08:33 UTC |
tests: shell: add packetpath test for timeout policy overrides |
1 |
fw@strlen.de |
skipped
|
| 2026-09-14 07:25 UTC |
flow offload teardown when layer 2 roaming |
5 |
julius@bairaktaris.de |
finished
in 4h52m0s
|
| 2026-09-13 10:42 UTC |
netfilter: flowtable: correct and advertise the vlan match |
2 |
julius@bairaktaris.de |
finished
in 4h13m0s
|
| 2026-09-12 20:24 UTC |
netlink: policy: report the big endian attributes |
2 |
kuba@kernel.org |
finished
in 4h3m0s
|
| 2026-09-12 17:31 UTC |
ipvs: bound twos scheduler destination walks |
1 |
weir@nebusec.ai |
finished
in 2h23m0s
|
| 2026-09-12 07:40 UTC |
net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check |
2 |
farhad.alemi@berkeley.edu |
finished
in 4h52m0s
|
| 2026-09-12 03:56 UTC |
ipvs: avoid stack overflow from recursive connection expiration |
1 |
zihanx@nebusec.ai |
finished
in 5h53m0s
|
| 2026-09-12 01:32 UTC |
ipvs: add per-service secure_tcp |
1 |
adrianox@gmail.com |
finished
in 4h33m0s
|
| 2026-09-12 01:10 UTC |
netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name |
1 |
namangulati@google.com |
finished
in 4h0m0s
|
| 2026-09-11 19:20 UTC |
src: release scope symbols by reference count |
1 |
avinash.duduskar@gmail.com |
skipped
|
| 2026-09-11 18:34 UTC |
ipvs: filter some flags received in the backup server |
1 |
ja@ssi.bg |
finished
in 3h44m0s
|
| 2026-09-11 14:42 UTC |
netfilter: conntrack: prevent nf_conntrack_buckets race condition |
1 |
fmancera@suse.de |
finished
in 1h13m0s
|
| 2026-09-11 11:43 UTC |
ipvs: revalidate ihl before icmp_send |
2 |
ja@ssi.bg |
finished
in 3h52m0s
|
| 2026-09-11 08:44 UTC |
Netfilter updates for net-next |
1 |
pablo@netfilter.org |
finished
in 4h31m0s
|
| 2026-09-11 03:56 UTC |
selftests: netfilter: fix nft_audit.sh auditd detection |
1 |
jinli@lanxincomputing.com |
skipped
|
| 2026-09-11 00:17 UTC |
net: reject a forward path that loops back to the tunnel |
1 |
farhad.alemi@berkeley.edu |
skipped
|
| 2026-09-10 20:02 UTC |
netfilter: nft_synproxy: use the family-aware checksum helper |
1 |
kmehltretter@gmail.com |
finished
in 3h59m0s
|
| 2026-09-10 16:20 UTC |
netfilter: flowtable: Saturate 16-bit flow_tuple->mtu |
1 |
alice.kernel@fastmail.im |
finished
in 4h23m0s
|
| 2026-09-10 14:02 UTC |
skb extension for BPF metadata |
2 |
jakub@cloudflare.com |
finished
in 4h10m0s
|