| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-08-06 20:22 UTC | netfilter: ipset: remove need to allocate memory on delete operations | 3 | fw@strlen.de | - |
| 2026-08-06 17:41 UTC | netfilter: ipset: remove need to allocate memory on delete operations | 2 | fw@strlen.de | in progress |
| 2026-08-06 14:17 UTC | netfilter: ipset: let destroy callbacks adjust ext mem size | 1 | fw@strlen.de | finished in 4h3m0s |
| 2026-08-06 13:53 UTC | netfilter: ipset: fix list type element drift bug | 1 | fw@strlen.de | finished in 5h13m0s |
| 2026-08-06 10:19 UTC | netfilter: switch ipset to rhashtable | 1 | fw@strlen.de |
finished
in 4h14m0s
[2 findings] |
| 2026-08-04 17:02 UTC | netfilter: ipset: let destroy callbacks adjust ext mem size | 1 | fw@strlen.de | finished in 4h24m0s |
| 2026-08-04 17:02 UTC | netfilter: ipset: remove need to allocate memory on delete operations | 1 | fw@strlen.de | skipped |
| 2026-08-01 12:10 UTC | netfilter: ipset: serialize kernel-side put-byindex with swap | 1 | zhilinz@nebusec.ai | finished in 4h17m0s |
| 2026-07-30 18:38 UTC | netfilter: ipset fixes and rhastable prep work | 1 | fw@strlen.de | finished in 4h45m0s |
| 2026-07-26 12:03 UTC | net: flow_offload: serialize driver callback lists | 2 | bestswngs@gmail.com | finished in 5h21m0s |
| 2026-07-23 10:35 UTC | ipset test updates | 1 | fw@strlen.de | skipped |
| 2026-07-22 22:38 UTC | netfilter: ipset: fix refcount race between list:set GC and swap | 1 | xmei5@asu.edu | finished in 5h45m0s |
| 2026-07-14 13:18 UTC | netfilter: ipset: convert to rhashtable | 1 | fw@strlen.de |
finished
in 5h4m0s
[1 findings] |
| 2026-07-13 16:33 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 3 | bestswngs@gmail.com | finished in 5h12m0s |
| 2026-07-13 16:15 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 2 | bestswngs@gmail.com | finished in 55m0s |
| 2026-07-13 09:59 UTC | netfilter: ipset: do not update comments from kernel-side hash adds | 1 | david.lee@trailofbits.com | finished in 5h33m0s |
| 2026-07-09 20:03 UTC | test updates | 1 | fw@strlen.de | skipped |
| 2026-07-04 06:22 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 1 | bestswngs@gmail.com | finished in 4h51m0s |
| 2026-07-02 13:46 UTC | netfilter: ipset: gc, backlog and cidr patches | 1 | kadlec@netfilter.org | finished in 5h18m0s |
| 2026-06-25 16:47 UTC | netfilter: nf_log: validate MAC header was set before dumping it | 2 | alexevgmart@gmail.com | skipped |
| 2026-06-25 01:00 UTC | netfilter: ipset: fix race between dump and ip_set_list resize | 1 | xmei5@asu.edu | finished in 4h33m0s |
| 2026-06-21 18:49 UTC | netfilter: TCPMSS: handle packets with unaligned MSS option | 3 | kacper.kokot.44@gmail.com | finished in 4h2m0s |
| 2026-06-17 08:41 UTC | netfilter: ipset fixes, second batch | 3 | kadlec@netfilter.org |
finished
in 4h21m0s
[3 findings] |
| 2026-06-09 07:27 UTC | netfilter: ipset fixes, second batch | 2 | kadlec@netfilter.org |
finished
in 4h47m0s
[8 findings] |
| 2026-05-28 22:34 UTC | netfilter: TCPMSS: fix dropped packets when MSS option is unaligned | 2 | kacper.kokot.44@gmail.com | finished in 1h16m0s |
| 2026-05-28 07:08 UTC | netfilter: flowtable: fix offloaded ct timeout never being extended | 2 | adibente@gmail.com | finished in 4h28m0s |
| 2026-05-26 06:01 UTC | netfilter: flowtable: fix offloaded ct timeout never being extended | 1 | adibente@gmail.com | finished in 4h2m0s |
| 2026-05-23 15:26 UTC | netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag | 1 | devnexen@gmail.com | finished in 1h42m0s |
| 2026-05-23 13:15 UTC | netfilter: ipset fixes, second batch | 1 | kadlec@netfilter.org | finished in 4h9m0s |
| 2026-05-17 14:50 UTC | netfilter: ipset: preserve comment lifetime across resize and gc expiry | 2 | n05ec@lzu.edu.cn | finished in 4h9m0s |
| 2026-05-14 08:55 UTC | netfilter: ipset fixes | 7 | kadlec@netfilter.org |
finished
in 4h50m0s
[3 findings] |
| 2026-05-13 05:54 UTC | netfilter: ipset: fix comment extension lifetime during hash resize | 1 | n05ec@lzu.edu.cn | finished in 4h52m0s |
| 2026-05-08 20:58 UTC | netfilter: ipset fixes | 6 | kadlec@netfilter.org | finished in 4h9m0s |
| 2026-04-28 15:19 UTC | netfilter: ipset fixes | 1 | kadlec@netfilter.org | finished in 4h47m0s |
| 2026-04-27 07:34 UTC | netfilter: ipset fixes | 1 | kadlec@netfilter.org |
finished
in 1h39m0s
[1 findings] |
| 2026-04-22 15:41 UTC | netfilter: ipset: keep comment extensions private on resize | 1 | n05ec@lzu.edu.cn | finished in 4h29m0s |
| 2026-04-11 18:57 UTC | netfilter: nfnl_cthelper: apply per-class values when updating policies | 1 | devnexen@gmail.com | finished in 4h5m0s |
| 2026-04-08 07:02 UTC | netfilter: ipset: concurrent add and dump fixes | 1 | kadlec@netfilter.org |
finished
in 4h26m0s
[8 findings] |
| 2026-03-30 21:39 UTC | netfilter: ipset: drop logically empty buckets in mtype_del | 1 | yuantan098@gmail.com | finished in 4h20m0s |
| 2026-03-30 12:16 UTC | netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr | 1 | fw@strlen.de | finished in 4h27m0s |
| 2026-03-20 11:40 UTC | netfilter: ipset: Fix data race between add and list header | 1 | kadlec@netfilter.org | finished in 4h39m0s |
| 2026-03-15 07:44 UTC | hash: add fast paths for common key sizes and new fast hash functions | 1 | aaryan.bansal.dev@gmail.com | finished in 4h13m0s |
| 2026-03-13 20:13 UTC | netfilter: nf_nat_sip: validate exp->dir in nf_nat_sip_expected() | 1 | qguanni@gmail.com | finished in 1h52m0s |
| 2026-03-13 19:52 UTC | netfilter: nf_conntrack_sip: add bounds-checked port parsing helper | 2 | qguanni@gmail.com | finished in 1h0m0s |
| 2026-03-12 14:59 UTC | netfilter: xt_time: use unsigned int for monthday bit shift | 1 | qguanni@gmail.com | finished in 1h8m0s |
| 2026-03-12 14:55 UTC | netfilter: nf_conntrack_sip: fix OOB read in SIP URI port parsing | 1 | qguanni@gmail.com | finished in 58m0s |
| 2026-03-12 14:49 UTC | netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() | 1 | qguanni@gmail.com | finished in 2h2m0s |
| 2026-03-12 14:42 UTC | netfilter: ctnetlink: validate CTA_EXPECT_NAT_DIR value | 1 | qguanni@gmail.com | finished in 50m0s |
| 2026-03-06 19:12 UTC | netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() | 2 | qguanni@gmail.com | finished in 4h5m0s |
| 2026-03-06 08:08 UTC | netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() | 1 | qguanni@gmail.com | finished in 4h23m0s |
| 2026-02-24 12:28 UTC | netfilter: xt_owner: no longer acquire sk_callback_lock in mt_owner() | 1 | edumazet@google.com | finished in 4h21m0s |
| 2026-02-15 17:04 UTC | ipset: refuse to run under file capabilities | 1 | alan@sleuthco.ai | skipped |
| 2026-02-12 20:07 UTC | iptables: fix null dereference parsing bitwise operations | 2 | one-d-wide@protonmail.com | skipped |
| 2026-02-04 20:26 UTC | netfilter: nf_tables: fix reset request deadlock | 5 | brianwitte@mailfence.com | finished in 3h57m0s |
| 2026-02-03 05:07 UTC | netfilter: nf_tables: fix reset request deadlock | 4 | brianwitte@mailfence.com | finished in 4h4m0s |
| 2026-02-02 10:14 UTC | iptables: fix null dereference parsing bitwise operations | 1 | one-d-wide@protonmail.com | skipped |
| 2026-01-30 04:43 UTC | netfilter: conntrack: remove __read_mostly from nf_conntrack_generation | 1 | lirongqing@baidu.com | finished in 3h54m0s |
| 2026-01-22 17:46 UTC | Add IP6IP6 flowtable SW acceleration | 4 | lorenzo@kernel.org | finished in 4h9m0s |
| 2026-01-21 18:47 UTC | doc/netlink: Expand nftables specification | 6 | one-d-wide@protonmail.com | finished in 54m0s |
| 2026-01-16 08:13 UTC | Add IP6IP6 flowtable SW acceleration | 3 | lorenzo@kernel.org | finished in 4h6m0s |
| 2026-01-13 07:44 UTC | uapi: Use UAPI definitions of INT_MAX and INT_MIN | 2 | thomas.weissschuh@linutronix.de | finished in 52m0s |
| 2026-01-11 16:39 UTC | net/sched: Fix packet loops in mirred and netem | 1 | jhs@mojatatu.com | finished in 3h51m0s |
| 2026-01-05 08:26 UTC | uapi: Use UAPI definitions of INT_MAX and INT_MIN | 1 | thomas.weissschuh@linutronix.de | finished in 1h10m0s |
| 2026-01-04 14:05 UTC | netfilter: iptable_nat: fix null-ptr-deref in ipt_nat_register_lookups | 1 | wangzhi_xd@stu.xidian.edu.cn | finished in 4h4m0s |
| 2025-12-25 21:02 UTC | net: sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop | 4 | jhs@mojatatu.com | finished in 3h49m0s |
| 2025-12-19 11:53 UTC | netfilter: nf_conntrack: Add allow_clash to generic protocol handler | 1 | hamaguchi.yuto@da.mitsubishielectric.co.jp | finished in 3h57m0s |
| 2025-12-19 05:13 UTC | netfilter: replace -EEXIST with -EBUSY | 1 | da.gomez@kernel.org | finished in 3h50m0s |
| 2025-12-15 16:15 UTC | net: sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop | 3 | jhs@mojatatu.com | finished in 4h2m0s |
| 2025-12-15 15:32 UTC | netfilter: nft_counter: Fix reset of counters on 32bit archs | 2 | anders.grahn@gmail.com | finished in 3h51m0s |
| 2025-12-15 12:12 UTC | netfilter: nft_counter: Fix reset of counters on 32bit archs | 1 | anders.grahn@gmail.com | finished in 3h52m0s |
| 2025-12-09 07:35 UTC | Add IP6IP6 flowtable SW acceleration | 2 | lorenzo@kernel.org | finished in 3h49m0s |
| 2025-12-07 16:06 UTC | Add IP6IP6 flowtable SW acceleration | 1 | lorenzo@kernel.org |
finished
in 3h52m0s
[3 findings] |
| 2025-12-03 13:20 UTC | netfilter: nft_set_hash: fix potential NULL deref in nft_rhash_deactivate | 1 | mlbnkm1@gmail.com | finished in 53m0s |
| 2025-12-01 13:45 UTC | Add IP6IP6 flowtable SW acceleration | 1 | lorenzo@kernel.org |
finished
in 3h49m0s
[1 findings] |
| 2025-12-01 10:22 UTC | netfilter: Always set route tuple out ifindex | 1 | lorenzo@kernel.org | finished in 1h44m0s |
| 2025-11-27 22:21 UTC | selftests: netfilter: nft_flowtable.sh: Add the capability to send IPv6 TCP traffic | 2 | lorenzo@kernel.org | finished in 49m0s |
| 2025-11-26 14:07 UTC | net: Remove KMSG_COMPONENT macro | 1 | hca@linux.ibm.com | finished in 4h5m0s |
| 2025-11-22 18:41 UTC | selftests: netfilter: nft_flowtable.sh: Add the capability to send IPv6 TCP traffic | 1 | lorenzo@kernel.org | finished in 49m0s |
| 2025-11-22 00:37 UTC | netfilter: nfnetlink_queue: optimize verdict lookup with hash table | 5 | scott.k.mitch1@gmail.com | finished in 3h50m0s |
| 2025-11-21 10:44 UTC | net: ipv4: fix spelling typos in comments | 2 | i.shihao.999@gmail.com | finished in 50m0s |
| 2025-11-21 08:52 UTC | ipvs: fix ipv4 null-ptr-deref in route error path | 2 | slavin452@gmail.com | finished in 3h50m0s |
| 2025-11-20 19:03 UTC | ipvs: fix ipv4 null-ptr-deref in route error path | 1 | slavin452@gmail.com | finished in 3h56m0s |
| 2025-11-20 15:18 UTC | doc/netlink: Expand nftables specification | 5 | one-d-wide@protonmail.com | finished in 55m0s |
| 2025-11-19 03:01 UTC | netfilter: conntrack: Add missing modification about data-race around ct->timeout | 2 | zhaochenguang@kylinos.cn | finished in 4h2m0s |
| 2025-11-17 08:56 UTC | netfilter: conntrack: Add missing modification about data-race around ct->timeout | 1 | zhaochenguang@kylinos.cn | finished in 3h57m0s |
| 2025-11-14 12:36 UTC | audit: improve NETFILTER_PKT records | 7 | rrobaina@redhat.com | finished in 3h49m0s |
| 2025-11-13 15:46 UTC | netfilter: nfnetlink_queue: optimize verdict lookup with hash table | 4 | scott.k.mitch1@gmail.com | finished in 4h1m0s |
| 2025-11-13 15:32 UTC | netfilter: nfnetlink_queue: optimize verdict lookup with hash table | 3 | scott.k.mitch1@gmail.com | finished in 4h0m0s |
| 2025-11-13 09:26 UTC | netfilter: nfnetlink_queue: optimize verdict lookup with hash table | 2 | scott.k.mitch1@gmail.com |
finished
in 3h56m0s
[1 findings] |
| 2025-11-12 16:03 UTC | netfilter: nfnetlink_queue: optimize verdict lookup with hash table | 1 | scott.k.mitch1@gmail.com | finished in 3h52m0s |
| 2025-11-09 19:24 UTC | conntrack: bridge: add double vlan, pppoe and pppoe-in-q | 17 | ericwouds@gmail.com | finished in 3h38m0s |
| 2025-11-07 11:14 UTC | Add IPIP flowtable SW acceleration | 9 | lorenzo@kernel.org | skipped |
| 2025-11-06 16:53 UTC | audit: improve NETFILTER_PKT records | 5 | rrobaina@redhat.com | finished in 1h57m0s |
| 2025-11-04 14:59 UTC | selftests: netfilter: Add bridge_fastpath.sh | 4 | ericwouds@gmail.com | finished in 55m0s |
| 2025-11-04 14:57 UTC | conntrack: bridge: add double vlan, pppoe and pppoe-in-q | 16 | ericwouds@gmail.com | finished in 3h57m0s |
| 2025-11-01 19:20 UTC | netfilter: ip6t_srh: fix UAPI kernel-doc comments format | 1 | rdunlap@infradead.org | finished in 48m0s |
| 2025-11-01 19:20 UTC | netfilter: nf_tables: improve UAPI kernel-doc comments | 1 | rdunlap@infradead.org | finished in 47m0s |
| 2025-10-31 13:59 UTC | audit: improve NETFILTER_PKT records | 4 | rrobaina@redhat.com | finished in 3h54m0s |
| 2025-10-30 08:35 UTC | treewide: Rename ERR_PTR_PCPU() --> PCPU_ERR_PTR() | 1 | andriy.shevchenko@linux.intel.com | finished in 44m0s |
| 2025-10-28 17:29 UTC | selftest: net: fix socklen_t type mismatch in sctp_collision test | 2 | ankitkhushwaha.linux@gmail.com | finished in 49m0s |