| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-09-28 12:46 UTC | net: cap skb->queue_mapping when the tx queue is picked | 4 | jhs@mojatatu.com | - |
| 2026-09-28 08:28 UTC | netfilter: ebtables: ebt_802_3: drop short frames before the match reads LLC | 1 | guozh23@xiaopeng.com | - |
| 2026-09-27 22:34 UTC | Netfilter updates for net-next | 1 | pablo@netfilter.org | - |
| 2026-09-27 22:08 UTC | Netfilter/IPVS fixes for net | 1 | pablo@netfilter.org | - |
| 2026-09-27 16:32 UTC | netfilter: flowtable: flush delete work after final GC | 2 | nicoyip.dev@gmail.com | - |
| 2026-09-27 07:15 UTC | netfilter: nf_tables: serialize offload stats with callback unbind | 1 | nicoyip.dev@gmail.com | in progress |
| 2026-09-27 06:24 UTC | ipvs: fix protocol data lifetime during namespace teardown | 1 | nicoyip.dev@gmail.com | finished in 1h55m0s |
| 2026-09-27 04:31 UTC | netfilter: x_tables: avoid holding mutex over faultable user copies | 4 | zihanx@nebusec.ai | finished in 4h6m0s |
| 2026-09-26 20:45 UTC | netfilter: ip6t_SYNPROXY: check TCP header before verifying checksum | 1 | raghunathpalla.0209@gmail.com | finished in 3h49m0s |
| 2026-09-26 17:52 UTC | netfilter: conntrack: wait for RCU readers before freeing the hash | 1 | nicoyip.dev@gmail.com | finished in 4h7m0s |
| 2026-09-26 17:51 UTC | ipvs: Defer application parent freeing until after RCU readers | 1 | nicoyip.dev@gmail.com | finished in 4h2m0s |
| 2026-09-26 09:19 UTC | netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns | 4 | zihanx@nebusec.ai | finished in 3h59m0s |
| 2026-09-25 19:36 UTC | ipvs: wait grace period while reusing dest from trash | 2 | weir@nebusec.ai | finished in 3h56m0s |
| 2026-09-25 16:40 UTC | ipvs: avoid stack overflow from recursive connection expiration | 5 | zihanx@nebusec.ai | finished in 3h58m0s |
| 2026-09-25 14:11 UTC | ipvs: fix OOB write when NATing ICMPv6 errors quoting non-first fragments | 1 | axel.mierczuk@1password.com | finished in 4h19m0s |
| 2026-09-25 14:11 UTC | ipvs: keep templates and cport 0 conns away from packet lookups | 1 | axel.mierczuk@1password.com | finished in 4h0m0s |
| 2026-09-25 13:51 UTC | expr: add support to math expression | 5 | fmancera@suse.de | skipped |
| 2026-09-25 13:49 UTC | netfilter: nf_tables: add math expression support | 6 | fmancera@suse.de | finished in 2h24m0s |
| 2026-09-24 20:25 UTC | netfilter: nf_flow_table_bpf: populate VLAN encap in XDP flowtable lookup | 1 | adrianox@gmail.com | finished in 3h18m0s |
| 2026-09-24 20:13 UTC | netfilter: nft_reject: prevent unbounded recursion in output hooks | 3 | fmancera@suse.de | finished in 4h0m0s |
| 2026-09-23 19:50 UTC | netfilter: flowtable: restore wireless forward path | 1 | pablo@netfilter.org |
finished
in 55m0s
[1 findings] |
| 2026-09-23 12:27 UTC | netfilter: conntrack: add and use nf_ct_get_real() | 2 | fw@strlen.de | finished in 4h1m0s |
| 2026-09-23 10:54 UTC | netfilter: conntrack: add and use nf_ct_get_real() | 1 | fw@strlen.de | finished in 4h17m0s |
| 2026-09-23 09:54 UTC | ipvs: avoid stack overflow from recursive connection expiration | 4 | zihanx@nebusec.ai | finished in 4h18m0s |
| 2026-09-23 04:23 UTC | netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode | 1 | subhampal789@gmail.com | skipped |
| 2026-09-22 19:18 UTC | netfilter: bpf: reject invalid NAT manipulation types | 1 | fmancera@suse.de | finished in 4h4m0s |
| 2026-09-22 17:39 UTC | netfilter: ecache: bound destroy event redelivery | 1 | weir@nebusec.ai | finished in 3h46m0s |
| 2026-09-22 16:40 UTC | netfilter: nft_nat: use the right enum members for nat type switch | 1 | fmancera@suse.de | finished in 1h3m0s |
| 2026-09-22 09:52 UTC | netfilter: nf_dup: disable duplication in user namespaces | 3 | zihanx@nebusec.ai | finished in 5h23m0s |
| 2026-09-22 09:25 UTC | netfilter: nft_reject: prevent unbounded recursion in output hooks | 2 | fmancera@suse.de | finished in 4h33m0s |
| 2026-09-22 09:08 UTC | ipvs: skip committing sync_threshold when proc_dointvec fails | 1 | joel.granados@kernel.org | finished in 4h0m0s |
| 2026-09-22 03:03 UTC | net: prevent partial checksums from modifying network headers | 6 | habte.yibelo@gmail.com | finished in 4h2m0s |
| 2026-09-21 22:29 UTC | netfilter: nft_reject: prevent unbounded recursion in output hooks | 1 | fmancera@suse.de | finished in 4h3m0s |
| 2026-09-21 20:57 UTC | ipvs: add per-service secure_tcp | 5 | adrianox@gmail.com | finished in 3h58m0s |
| 2026-09-21 14:55 UTC | ovs, net/sched: fixes for UAF after conntrack extension realloc | 1 | i.maximets@ovn.org | finished in 4h24m0s |
| 2026-09-21 13:03 UTC | netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets | 2 | lvjunyu@cmss.chinamobile.com | finished in 4h1m0s |
| 2026-09-21 02:53 UTC | net: prevent partial checksums from modifying network headers | 5 | habte.yibelo@gmail.com | finished in 3h47m0s |
| 2026-09-21 02:08 UTC | netfilter: nft_set_rbtree: skip transaction elements during GC | 1 | bestswngs@gmail.com | finished in 4h20m0s |
| 2026-09-20 11:58 UTC | netfilter: x_tables: avoid holding mutex over faultable user copies | 3 | zihanx@nebusec.ai | finished in 5h6m0s |
| 2026-09-20 09:31 UTC | ipvs: avoid stack overflow from recursive connection expiration | 3 | zihanx@nebusec.ai | finished in 5h25m0s |
| 2026-09-20 07:45 UTC | netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets | 1 | lvjunyu@cmss.chinamobile.com | finished in 4h14m0s |
| 2026-09-20 05:47 UTC | ipvs: add per-service secure_tcp | 4 | adrianox@gmail.com | finished in 3h51m0s |
| 2026-09-19 21:52 UTC | netfilter: nf_nat: fix unsigned range_size underflow for ICMP and GRE when max < min | 1 | benquike@gmail.com | finished in 4h12m0s |
| 2026-09-19 21:52 UTC | netfilter: nfnetlink_log: fix config error handling, SIT headroom OOB read, and nlmsg rollback | 1 | benquike@gmail.com | finished in 4h4m0s |
| 2026-09-19 18:07 UTC | ipvs: filter some connection flags | 2 | ja@ssi.bg | finished in 4h1m0s |
| 2026-09-19 03:34 UTC | netfilter: nf_tables: defer object destruction on abort past commit_mutex | 2 | ngocthang2710.1999@gmail.com | finished in 4h33m0s |
| 2026-09-19 03:29 UTC | netfilter: nf_tables: defer object destruction on abort past commit_mutex | 1 | ngocthang2710.1999@gmail.com | finished in 4h34m0s |
| 2026-09-18 18:31 UTC | selftests: netfilter: nft_queue.sh: only queue icmp echo request/reply | 1 | kuba@kernel.org | skipped |
| 2026-09-18 14:58 UTC | netfilter: harden conntrack vs ingress pipeline rewrites | 3 | fw@strlen.de | finished in 1h44m0s |
| 2026-09-18 11:53 UTC | netfilter: flowtable: generalize pending status bit | 1 | pablo@netfilter.org |
finished
in 56m0s
[1 findings] |
| 2026-09-18 09:26 UTC | netfilter: nf_ip6_checksum: validate checksum offset | 1 | weir@nebusec.ai | finished in 4h25m0s |
| 2026-09-18 06:18 UTC | netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers | 5 | running910@gmail.com | finished in 3h54m0s |
| 2026-09-17 17:37 UTC | Fix for warnings when compiling for 32bit arch | 1 | phil@nwl.cc | skipped |
| 2026-09-17 17:31 UTC | doc: nft.8: Describe nftables transactions and their limitations | 1 | phil@nwl.cc | skipped |
| 2026-09-17 13:09 UTC | netfilter: harden conntrack vs ingress pipeline rewrites | 2 | fw@strlen.de | finished in 4h44m0s |
| 2026-09-17 08:29 UTC | net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload | 3 | lorenzo.bianconi@oss.qualcomm.com | finished in 3h46m0s |
| 2026-09-17 03:02 UTC | ipvs: avoid stack overflow from recursive connection expiration | 2 | zihanx@nebusec.ai | finished in 4h11m0s |
| 2026-09-17 02:17 UTC | selftests: net: update netfilter netlink config | 1 | hangbin.liu@linux.dev | skipped |
| 2026-09-16 23:16 UTC | Netfilter/IPVS fixes for net | 1 | pablo@netfilter.org | finished in 4h6m0s |
| 2026-09-16 22:00 UTC | netfilter: nfnetlink_queue: hash queue instance by portid too | 1 | pablo@netfilter.org | finished in 4h22m0s |
| 2026-09-16 20:50 UTC | ipvs: add per-service secure_tcp | 3 | adrianox@gmail.com | finished in 4h19m0s |
| 2026-09-16 12:51 UTC | ipset: replace internal hash table with rhashtable | 5 | fw@strlen.de | finished in 4h15m0s |
| 2026-09-16 07:36 UTC | netfilter: nf_dup_netdev: Fix net_device reference leak in nft_fwd_dup_netdev_offload() | 1 | vulab@iscas.ac.cn | finished in 4h51m0s |
| 2026-09-16 07:18 UTC | tests: shell: add packetpath test for nat on loopback | 1 | fw@strlen.de | skipped |
| 2026-09-14 19:28 UTC | expression: assert if clone interface is undefine | 1 | pablo@netfilter.org | skipped |
| 2026-09-14 16:58 UTC | netfilter: nf_conntrack: validate skb->_nfct and packet headers | 1 | fw@strlen.de | finished in 1h33m0s |
| 2026-09-14 12:24 UTC | net: update dev_fill_forward_path() to handle mac80211 special case | 1 | pablo@netfilter.org | finished in 5h28m0s |
| 2026-09-14 11:51 UTC | netfilter: nf_tables: skip expired catchall elements on insert and delete | 3 | ljp1205831794@gmail.com | finished in 5h33m0s |
| 2026-09-14 08:33 UTC | tests: shell: add packetpath test for timeout policy overrides | 1 | fw@strlen.de | skipped |
| 2026-09-14 07:25 UTC | flow offload teardown when layer 2 roaming | 5 | julius@bairaktaris.de | finished in 4h52m0s |
| 2026-09-13 10:42 UTC | netfilter: flowtable: correct and advertise the vlan match | 2 | julius@bairaktaris.de | finished in 4h13m0s |
| 2026-09-12 17:31 UTC | ipvs: bound twos scheduler destination walks | 1 | weir@nebusec.ai | finished in 2h23m0s |
| 2026-09-12 07:40 UTC | net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check | 2 | farhad.alemi@berkeley.edu | finished in 4h52m0s |
| 2026-09-12 03:56 UTC | ipvs: avoid stack overflow from recursive connection expiration | 1 | zihanx@nebusec.ai | finished in 5h53m0s |
| 2026-09-12 01:32 UTC | ipvs: add per-service secure_tcp | 1 | adrianox@gmail.com | finished in 4h33m0s |
| 2026-09-12 01:10 UTC | netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name | 1 | namangulati@google.com | finished in 4h0m0s |
| 2026-09-11 19:20 UTC | src: release scope symbols by reference count | 1 | avinash.duduskar@gmail.com | skipped |
| 2026-09-11 18:34 UTC | ipvs: filter some flags received in the backup server | 1 | ja@ssi.bg | finished in 3h44m0s |
| 2026-09-11 14:59 UTC | tests: shell: drop metainfo from the json dump comparison | 1 | avinash.duduskar@gmail.com | skipped |
| 2026-09-11 14:59 UTC | evaluate: reject negative values for unsigned datatypes | 3 | avinash.duduskar@gmail.com | skipped |
| 2026-09-11 14:42 UTC | netfilter: conntrack: prevent nf_conntrack_buckets race condition | 1 | fmancera@suse.de | finished in 1h13m0s |
| 2026-09-11 11:43 UTC | ipvs: revalidate ihl before icmp_send | 2 | ja@ssi.bg | finished in 3h52m0s |
| 2026-09-11 08:44 UTC | Netfilter updates for net-next | 1 | pablo@netfilter.org | finished in 4h31m0s |
| 2026-09-11 03:56 UTC | selftests: netfilter: fix nft_audit.sh auditd detection | 1 | jinli@lanxincomputing.com | skipped |
| 2026-09-11 00:17 UTC | net: reject a forward path that loops back to the tunnel | 1 | farhad.alemi@berkeley.edu | skipped |
| 2026-09-10 20:02 UTC | netfilter: nft_synproxy: use the family-aware checksum helper | 1 | kmehltretter@gmail.com | finished in 3h59m0s |
| 2026-09-10 16:20 UTC | netfilter: flowtable: Saturate 16-bit flow_tuple->mtu | 1 | alice.kernel@fastmail.im | finished in 4h23m0s |
| 2026-09-10 10:54 UTC | netfilter: conntrack: make filtering by zone discoverable | 2 | i.maximets@ovn.org | finished in 4h35m0s |
| 2026-09-10 10:08 UTC | ipvs: fix LBLC and LBLCR cache growth | 4 | ja@ssi.bg | finished in 3h54m0s |
| 2026-09-10 09:00 UTC | netfilter: offload a TCP flow whose reply is never seen | 1 | julius@bairaktaris.de | finished in 4h12m0s |
| 2026-09-10 08:33 UTC | netfilter: nft_flow_offload: drop flowtable reference on init error path | 1 | ljp1205831794@gmail.com | finished in 4h31m0s |
| 2026-09-10 08:03 UTC | netfilter: nf_tables: skip expired catchall elements on insert and delete | 2 | ljp1205831794@gmail.com | finished in 3h59m0s |
| 2026-09-10 00:38 UTC | netlink: specs: conntrack: minor spec fixes | 1 | kuba@kernel.org | skipped |
| 2026-09-09 22:18 UTC | Netfilter/IPVS fixes for net | 1 | pablo@netfilter.org | finished in 4h7m0s |
| 2026-09-09 15:55 UTC | ipvs: fix buffer overflow when sending sync messages | 1 | ja@ssi.bg | finished in 4h29m0s |
| 2026-09-09 14:49 UTC | netfilter: ctnetlink: fix inverted IPv6 address match in dump filter | 1 | piotr@kubik.pl | finished in 4h56m0s |
| 2026-09-09 14:36 UTC | netfilter: x_tables: avoid holding mutex over faultable user copies | 2 | zihanx@nebusec.ai | finished in 5h0m0s |
| 2026-09-09 11:13 UTC | ipvs: read the seq_mask only once on sync | 1 | ja@ssi.bg | finished in 4h26m0s |
| 2026-09-09 09:34 UTC | netfilter: nfnetlink: Fix for interrupted hook dumps | 4 | phil@nwl.cc | skipped |
| 2026-09-09 08:17 UTC | netfilter: flowtable: check namespace before iterating flows | 1 | qingfang.deng@linux.dev | finished in 4h12m0s |