| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-08-16 17:05 UTC | lib/textsearch: fix ts_bm resume offset, add tests, two small cleanups | 1 | bernard.ladenthin@gmail.com | finished in 3h50m0s |
| 2026-08-16 15:22 UTC | ipvs: bound LBLCR cache growth | 1 | zhilinz@nebusec.ai | finished in 4h26m0s |
| 2026-08-15 20:57 UTC | x86: add missing vzeroupper instructions | 1 | ebiggers@kernel.org | skipped |
| 2026-08-15 13:31 UTC | netfilter: nf_conntrack_sip: fix OOB read in ct_sip_parse_transport() | 1 | joasantonio108@gmail.com | finished in 2h24m0s |
| 2026-08-14 19:25 UTC | netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() | 2 | joasantonio108@gmail.com | skipped |
| 2026-08-14 19:17 UTC | netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() | 1 | joasantonio108@gmail.com | skipped |
| 2026-08-14 19:13 UTC | net: core: propagate unreadable flag in skb_zerocopy | 4 | almasrymina@google.com | finished in 3h48m0s |
| 2026-08-13 23:04 UTC | tests: runtest.sh: do kmemleak scan if available | 1 | fw@strlen.de | skipped |
| 2026-08-13 20:48 UTC | Change skb secmarks to x-array indexes | 1 | casey@schaufler-ca.com | finished in 5h7m0s |
| 2026-08-13 18:34 UTC | ipvs: fix integer overflow in ftp helper port/address parsing | 2 | joasantonio108@gmail.com | finished in 5h6m0s |
| 2026-08-13 16:59 UTC | ipvs: fix integer overflow in ftp helper port/address parsing | 1 | joasantonio108@gmail.com | finished in 1h20m0s |
| 2026-08-13 14:10 UTC | netfilter: nf_conntrack_h323: fix OOB read in get_bitmap() | 1 | joasantonio108@gmail.com | skipped |
| 2026-08-12 23:04 UTC | netfilter: nf_tables: move set_update_list to nftables per-netns | 1 | pablo@netfilter.org | finished in 4h13m0s |
| 2026-08-11 19:53 UTC | net: core: propagate unreadable flag in skb_zerocopy | 3 | almasrymina@google.com | finished in 3h45m0s |
| 2026-08-10 22:17 UTC | netfilter: nft_ct: validate timeout object protocol | 1 | kylebot@openai.com | finished in 5h0m0s |
| 2026-08-10 22:16 UTC | netfilter: nf_conntrack: validate template helper protocol | 1 | kylebot@openai.com | finished in 4h5m0s |
| 2026-08-10 22:13 UTC | ipvs: fix reversed sequence option serialization | 1 | kylebot@openai.com | finished in 4h57m0s |
| 2026-08-10 22:10 UTC | ipvs: reject invalid states in connection template sync records | 1 | kylebot@openai.com | finished in 4h31m0s |
| 2026-08-10 19:40 UTC | Netfilter updates for net | 1 | pablo@netfilter.org | finished in 4h28m0s |
| 2026-08-10 19:06 UTC | Netfilter/IPVS fixes for net | 1 | pablo@netfilter.org | finished in 4h13m0s |
| 2026-08-10 18:09 UTC | net: core: propagate unreadable flag in skb_zerocopy | 2 | almasrymina@google.com | finished in 4h17m0s |
| 2026-08-10 16:07 UTC | netfilter: nf_reject: initialize IPCB at inet ingress | 2 | david.lee@trailofbits.com | finished in 4h54m0s |
| 2026-08-10 13:01 UTC | net: sysctl: Const Qualify sysctl ctl_table arrays | 4 | joel.granados@kernel.org | finished in 4h5m0s |
| 2026-08-10 11:35 UTC | netfilter: nf_tables: don't queue packet path object notifications | 1 | littleddfu@gmail.com | finished in 4h18m0s |
| 2026-08-10 08:37 UTC | netfilter: conntrack: always lower timeout for non-closing RST packets | 1 | pablo@netfilter.org | finished in 4h12m0s |
| 2026-08-08 12:40 UTC | netfilter: flowtable: publish GC-visible tuple last | 1 | jeremy.jean@oss.cyber.gouv.fr | finished in 3h59m0s |
| 2026-08-07 08:45 UTC | netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers | 4 | running910@gmail.com | finished in 4h18m0s |
| 2026-08-07 07:59 UTC | selftests: netfilter: conntrack_dump_flush: remove unused variables and fix typo | 2 | fffsqian@163.com | skipped |
| 2026-08-07 00:28 UTC | netfilter: ipset: remove need to allocate memory on delete operations operations | 4 | fw@strlen.de | finished in 5h3m0s |
| 2026-08-06 20:22 UTC | netfilter: ipset: remove need to allocate memory on delete operations | 3 | fw@strlen.de | finished in 4h24m0s |
| 2026-08-06 17:41 UTC | netfilter: ipset: remove need to allocate memory on delete operations | 2 | fw@strlen.de | finished in 4h38m0s |
| 2026-08-06 16:11 UTC | netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path | 1 | a.velichayshiy@ispras.ru | finished in 4h36m0s |
| 2026-08-06 14:17 UTC | netfilter: ipset: let destroy callbacks adjust ext mem size | 1 | fw@strlen.de | finished in 4h3m0s |
| 2026-08-06 13:53 UTC | netfilter: ipset: fix list type element drift bug | 1 | fw@strlen.de | finished in 5h13m0s |
| 2026-08-06 10:52 UTC | ipvs: revalidate ihl to prevent out-of-bounds access | 1 | ja@ssi.bg | finished in 3h52m0s |
| 2026-08-06 10:19 UTC | netfilter: switch ipset to rhashtable | 1 | fw@strlen.de |
finished
in 4h14m0s
[2 findings] |
| 2026-08-06 07:50 UTC | selftests: netfilter: Remove unused variables in conntrack_dump_flush | 1 | fffsqian@163.com | skipped |
| 2026-08-05 08:53 UTC | net: pass net_device_path_ctx to dev_fill_forward_path() | 1 | lorenzo.bianconi@oss.qualcomm.com | finished in 4h6m0s |
| 2026-08-05 06:05 UTC | selftests: netfilter: add functional test for nft ct timeout policies | 1 | vebohr@gmail.com | skipped |
| 2026-08-04 17:02 UTC | netfilter: ipset: let destroy callbacks adjust ext mem size | 1 | fw@strlen.de | finished in 4h24m0s |
| 2026-08-04 17:02 UTC | netfilter: ipset: remove need to allocate memory on delete operations | 1 | fw@strlen.de | skipped |
| 2026-08-04 09:51 UTC | netfilter: nf_reject_ipv4: initialize IPCB at inet ingress | 1 | david.lee@trailofbits.com | finished in 1h51m0s |
| 2026-08-04 09:33 UTC | netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() | 1 | edumazet@google.com | finished in 2h18m0s |
| 2026-08-04 06:10 UTC | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 2 | david.lee@trailofbits.com | finished in 1h24m0s |
| 2026-08-03 17:14 UTC | net: core: propagate unreadable flag in skb_zerocopy | 2 | almasrymina@google.com | finished in 4h6m0s |
| 2026-08-03 16:43 UTC | tests: shell: add packetpath test for nft ct expectation support | 1 | fw@strlen.de | skipped |
| 2026-08-03 16:42 UTC | test: shell: add regression test for 'ip fwd to' stack recursion | 1 | fw@strlen.de | skipped |
| 2026-08-03 16:16 UTC | mptcp: misc fixes for v7.2-rc6 | 2 | matttbe@kernel.org | finished in 3h54m0s |
| 2026-08-03 11:25 UTC | bridge: Validate and clean up IPv6 neighbour suppression | 2 | danieller@nvidia.com | finished in 4h27m0s |
| 2026-08-03 08:43 UTC | netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state | 1 | fw@strlen.de | finished in 4h14m0s |
| 2026-08-03 01:11 UTC | netfilter: validate L4 headers after userspace packet writes | 4 | zhilinz@nebusec.ai | finished in 4h28m0s |
| 2026-08-01 14:27 UTC | netfilter: nf_conntrack: defer invalid log until after unlock | 4 | zihanx@nebusec.ai | finished in 5h6m0s |
| 2026-08-01 12:52 UTC | net: core: propagate unreadable flag in skb_zerocopy | 1 | almasrymina@google.com | finished in 4h22m0s |
| 2026-08-01 12:10 UTC | netfilter: ipset: serialize kernel-side put-byindex with swap | 1 | zhilinz@nebusec.ai | finished in 4h17m0s |
| 2026-08-01 07:27 UTC | datatype: accept a numeric cgroupsv2 id on input | 3 | avinash.duduskar@gmail.com | skipped |
| 2026-07-31 16:09 UTC | bpf: Fix netns reference imbalance in conntrack kfuncs | 3 | nicoyip.dev@gmail.com | finished in 2h12m0s |
| 2026-07-31 15:33 UTC | Netfilter updates for net-next | 1 | pablo@netfilter.org | finished in 4h26m0s |
| 2026-07-31 15:17 UTC | Netfilter/IPVS fixes for net | 1 | pablo@netfilter.org | finished in 4h26m0s |
| 2026-07-31 14:53 UTC | netfilter: conntrack: sctp: validate vtag before state changes | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h8m0s |
| 2026-07-31 14:27 UTC | ipvs: fix destination overload state updates | 4 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h28m0s |
| 2026-07-31 14:08 UTC | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 1 | david.lee@trailofbits.com | finished in 4h50m0s |
| 2026-07-31 14:08 UTC | netfilter: nf_conntrack: prevent helper extension relocation | 1 | david.lee@trailofbits.com | finished in 4h7m0s |
| 2026-07-31 13:44 UTC | netfilter: nf_conntrack: defer invalid log until after unlock | 3 | zihanx@nebusec.ai | finished in 4h31m0s |
| 2026-07-31 09:53 UTC | netfilter: add DEBUG_NET_WARN_ON_ONCE to skb_set_nfct() | 1 | pablo@netfilter.org | finished in 4h22m0s |
| 2026-07-31 06:36 UTC | netfilter: bridge: release template ct on non-IP path | 1 | zhilinz@nebusec.ai | finished in 4h25m0s |
| 2026-07-31 03:48 UTC | netfilter: validate L4 headers after userspace packet writes | 3 | zhilinz@nebusec.ai | finished in 4h30m0s |
| 2026-07-30 18:38 UTC | netfilter: ipset fixes and rhastable prep work | 1 | fw@strlen.de | finished in 4h45m0s |
| 2026-07-30 18:35 UTC | ipvs: csum validations, part 2 | 3 | ja@ssi.bg | finished in 4h18m0s |
| 2026-07-30 13:55 UTC | netfilter: fix TCP conntrack invalid-log deadlock | 2 | zihanx@nebusec.ai | finished in 4h44m0s |
| 2026-07-30 09:18 UTC | conntrack.8: Document --stats counters | 2 | phil@nwl.cc | skipped |
| 2026-07-30 08:29 UTC | bpf: Fix netns reference imbalance in conntrack kfuncs | 2 | nicoyip.dev@gmail.com | finished in 2h51m0s |
| 2026-07-30 07:30 UTC | netfilter: validate L4 headers after userspace packet writes | 2 | zhilinz@nebusec.ai | finished in 4h17m0s |
| 2026-07-29 17:37 UTC | datatype: accept a numeric cgroupsv2 id on input | 2 | avinash.duduskar@gmail.com | skipped |
| 2026-07-29 17:31 UTC | netfilter: ebt_nflog: pin the NFLOG backend | 1 | nicoyip.dev@gmail.com | finished in 2h16m0s |
| 2026-07-29 16:31 UTC | bpf: Fix netns reference imbalance in conntrack kfuncs | 1 | nicoyip.dev@gmail.com | finished in 2h9m0s |
| 2026-07-29 15:46 UTC | netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets | 2 | zhangmh25@mails.tsinghua.edu.cn | finished in 4h44m0s |
| 2026-07-29 14:28 UTC | netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets | 1 | zhangmh25@mails.tsinghua.edu.cn | finished in 4h58m0s |
| 2026-07-29 13:56 UTC | ipvs: stop estimator after disabled calc phase | 3 | zhilinz@nebusec.ai | finished in 4h34m0s |
| 2026-07-29 13:48 UTC | netfilter: fix TCP conntrack invalid-log deadlock | 1 | zihanx@nebusec.ai | skipped |
| 2026-07-29 11:28 UTC | tcp: diag: fix unbounded bucket lock hold in diag dump paths | 1 | zihanx@nebusec.ai | finished in 4h35m0s |
| 2026-07-28 20:25 UTC | ipvs: csum validations, part 2 | 2 | ja@ssi.bg | finished in 4h10m0s |
| 2026-07-28 17:11 UTC | mptcp: misc fixes for v7.2-rc6 | 1 | matttbe@kernel.org | finished in 4h1m0s |
| 2026-07-28 10:10 UTC | gitignore: Only ignore top level *.m4 | 1 | phil@nwl.cc | skipped |
| 2026-07-28 07:35 UTC | netfilter: conntrack: sctp: verify vtag before state changes | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h49m0s |
| 2026-07-28 04:21 UTC | ipvs: stop estimator after disabled calc phase | 2 | zhilinz@nebusec.ai | finished in 4h41m0s |
| 2026-07-27 19:41 UTC | netfilter: conncount: normalize tuple and zone on successful ct lookup | 1 | fmancera@suse.de | finished in 4h53m0s |
| 2026-07-27 18:50 UTC | ipvs: csum validations, part 2 | 1 | ja@ssi.bg | finished in 5h3m0s |
| 2026-07-27 18:09 UTC | netfilter: ebtables: avoid unbounded counter allocations | 1 | enjou1224z@gmail.com | finished in 6h25m0s |
| 2026-07-27 17:58 UTC | netfilter: h323: fix helper NAT mangling | 1 | enjou1224z@gmail.com | finished in 3h30m0s |
| 2026-07-27 16:58 UTC | ipvs: guard estimator enqueue until limits are set | 1 | enjou1224z@gmail.com | finished in 5h52m0s |
| 2026-07-27 08:24 UTC | datatype: accept a numeric cgroupsv2 id on input | 1 | avinash.duduskar@gmail.com | skipped |
| 2026-07-24 11:01 UTC | netfilter: ip6tables: set hotdrop for malformed extension header matches | 3 | running910@gmail.com | finished in 5h39m0s |
| 2026-07-24 10:49 UTC | Netfilter/IPVS updates for net-next | 1 | pablo@netfilter.org | finished in 4h54m0s |
| 2026-07-24 07:25 UTC | net: ip6_tunnel: use tunnel parameters for fill_forward_path route lookup | 3 | lorenzo@kernel.org | finished in 5h22m0s |
| 2026-07-23 10:35 UTC | ipset test updates | 1 | fw@strlen.de | skipped |
| 2026-07-22 22:38 UTC | netfilter: ipset: fix refcount race between list:set GC and swap | 1 | xmei5@asu.edu | finished in 5h45m0s |
| 2026-07-22 21:14 UTC | Netfilter/IPVS fixes for net | 1 | pablo@netfilter.org | finished in 5h22m0s |
| 2026-07-22 12:57 UTC | netfilter: nf_conntrack_h323: fix get_bitmap() overread | 1 | kudo3228@gmail.com | finished in 3h0m0s |
| 2026-07-22 10:25 UTC | ipvs: clear the nfct flag under lock | 1 | ja@ssi.bg | finished in 5h11m0s |
| 2026-07-22 10:15 UTC | ipvs: csum validations and data offsets | 3 | ja@ssi.bg | finished in 5h23m0s |