| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-07-19 22:15 UTC | netfilter: nft_payload: fix mask build for partial field offload | 1 | xmei5@asu.edu | finished in 5h1m0s |
| 2026-07-17 18:59 UTC | nft: fix out-of-bounds read listing an old-revision match | 1 | omkhar@linkedin.com | skipped |
| 2026-07-17 18:56 UTC | nft: bridge: fix among buffer overflow when set has no size | 1 | omkhar@linkedin.com | skipped |
| 2026-07-16 14:39 UTC | netfilter: nf_tables: make nft_object rhltable per netns | 1 | pablo@netfilter.org | finished in 4h35m0s |
| 2026-07-16 14:07 UTC | ipvs: use type-safe allocation helpers in ip_vs_rht_alloc | 1 | subasris1210@gmail.com | skipped |
| 2026-07-16 09:10 UTC | tests: shell: add template match bug test | 1 | fw@strlen.de | skipped |
| 2026-07-15 23:02 UTC | tests: py: Fix --keep test runner option | 1 | phil@nwl.cc | skipped |
| 2026-07-15 14:48 UTC | netfilter: conntrack: prevent helper extension relocation | 1 | iostreampy@proton.me | finished in 4h53m0s |
| 2026-07-14 13:18 UTC | netfilter: ipset: convert to rhashtable | 1 | fw@strlen.de |
finished
in 5h4m0s
[1 findings] |
| 2026-07-14 03:21 UTC | netfilter: ip6tables: set hotdrop for malformed extension header matches | 2 | running910@gmail.com | finished in 5h27m0s |
| 2026-07-13 18:36 UTC | netfilter: nft_fib: bail out if input device is missing | 1 | xmei5@asu.edu | finished in 5h11m0s |
| 2026-07-13 16:33 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 3 | bestswngs@gmail.com | finished in 5h12m0s |
| 2026-07-13 16:15 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 2 | bestswngs@gmail.com | finished in 55m0s |
| 2026-07-13 16:06 UTC | netfilter: conntrack_helper: pass master conntrack to helper functions | 1 | pablo@netfilter.org | finished in 4h42m0s |
| 2026-07-13 13:55 UTC | utils: add minimal nfnlog test case | 1 | fw@strlen.de | skipped |
| 2026-07-13 12:53 UTC | selftests: netfilter: nft_flowtable.sh: fix offload counter verification for tunnel tests | 2 | lorenzo@kernel.org | skipped |
| 2026-07-13 12:46 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 6 | lorenzo@kernel.org | skipped |
| 2026-07-13 11:07 UTC | net: sysctl: Const Qualify sysctl ctl_table arrays | 3 | joel.granados@kernel.org | finished in 5h22m0s |
| 2026-07-13 09:59 UTC | netfilter: ipset: do not update comments from kernel-side hash adds | 1 | david.lee@trailofbits.com | finished in 5h33m0s |
| 2026-07-13 09:48 UTC | ipvs: fix destination overload state updates | 3 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h28m0s |
| 2026-07-12 23:42 UTC | netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() | 1 | xmei5@asu.edu | finished in 3h29m0s |
| 2026-07-12 23:06 UTC | netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair() | 1 | pablo@netfilter.org | finished in 4h37m0s |
| 2026-07-12 07:32 UTC | netfilter: nf_nat: stop reusing DEAD RTP expectations | 2 | iostreampy@proton.me | finished in 5h12m0s |
| 2026-07-11 14:21 UTC | netfilter: nf_nat: do not reuse an unexpected expectation on RTCP clash | 1 | iostreampy@proton.me | finished in 2h55m0s |
| 2026-07-11 13:55 UTC | selftests: netfilter: nft_flowtable.sh: check offload counters for IP6IP6 tunnel test | 1 | lorenzo@kernel.org | skipped |
| 2026-07-10 15:14 UTC | Address Sashiko review of NAT hook dump code | 3 | phil@nwl.cc | finished in 4h51m0s |
| 2026-07-10 14:37 UTC | netfilter: updates for net | 1 | fw@strlen.de | finished in 5h7m0s |
| 2026-07-10 13:27 UTC | netfilter: nf_nat: recalculate TCP TS offset after SNAT port rewrite | 3 | xietangxin@h-partners.com | finished in 4h51m0s |
| 2026-07-10 10:47 UTC | netfilter: x_physdev: masks are not c-strings | 1 | fw@strlen.de | finished in 4h39m0s |
| 2026-07-10 07:36 UTC | netfilter: flowtable: tear down flow entries with stale dst from GC | 1 | pablo@netfilter.org | finished in 5h6m0s |
| 2026-07-09 20:23 UTC | ipvs: fix the checksum validations | 1 | ja@ssi.bg | finished in 5h14m0s |
| 2026-07-09 20:03 UTC | test updates | 1 | fw@strlen.de | skipped |
| 2026-07-09 19:46 UTC | Address Sashiko review of NAT hook dump code | 2 | phil@nwl.cc | finished in 3h4m0s |
| 2026-07-09 16:53 UTC | mnl: support RLIMIT_NOFILE soft limit > FD_SETSIZE | 1 | csnider@mirantis.com | skipped |
| 2026-07-09 13:12 UTC | netfilter: nf_nat: recalculate TCP TS offset when snat change sport | 2 | xietangxin@h-partners.com | finished in 4h57m0s |
| 2026-07-09 11:40 UTC | netfilter: flowtable: use correct direction to set up tunnel route | 1 | pablo@netfilter.org | finished in 5h7m0s |
| 2026-07-09 08:52 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 5 | lorenzo@kernel.org | finished in 5h8m0s |
| 2026-07-09 06:30 UTC | netfilter: ip6tables: set hotdrop for malformed extension header matches | 1 | running910@gmail.com | finished in 5h17m0s |
| 2026-07-08 23:35 UTC | parser_json: initialize geneve options list for empty tunnel array | 1 | omkhar@linkedin.com | skipped |
| 2026-07-08 20:54 UTC | netfilter: flowtable: tear down HW offloaded flows on FIB route changes | 1 | anzaki@gmail.com |
finished
in 6h18m0s
[1 findings] |
| 2026-07-08 18:11 UTC | netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() | 2 | xmei5@asu.edu | finished in 2h42m0s |
| 2026-07-08 18:03 UTC | ipvs: fix more places with wrong ipv6 transport offsets | 1 | ja@ssi.bg | finished in 5h1m0s |
| 2026-07-08 16:19 UTC | Address Sashiko review of NAT hook dump code | 1 | phil@nwl.cc |
finished
in 2h11m0s
[1 findings] |
| 2026-07-08 14:28 UTC | ipvs: reload ip header after head reallocation | 1 | fw@strlen.de | finished in 5h11m0s |
| 2026-07-08 14:02 UTC | netfilter: updates for net | 1 | fw@strlen.de | finished in 4h47m0s |
| 2026-07-08 12:48 UTC | net: ip6_tunnel: use tunnel parameters for fill_forward_path route lookup | 1 | lorenzo@kernel.org | finished in 5h22m0s |
| 2026-07-08 11:25 UTC | net: ipip: use tunnel parameters for fill_forward_path route lookup | 1 | lorenzo@kernel.org | finished in 5h2m0s |
| 2026-07-08 06:04 UTC | ipvs: make destination flags atomic | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h24m0s |
| 2026-07-08 05:27 UTC | netfilter: nf_conncount: fix zone comparison in tuple dedup | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h7m0s |
| 2026-07-07 19:51 UTC | netfilter: replace u_int*_t with kernel int types (batch 3) | 1 | carlos@carlosgrillet.me | skipped |
| 2026-07-07 18:25 UTC | ipvs: ensure inner headers in ICMP errors are in headroom | 2 | ja@ssi.bg | finished in 5h58m0s |
| 2026-07-07 11:18 UTC | netfilter: handle unreadable frags | 2 | fw@strlen.de | finished in 5h5m0s |
| 2026-07-07 11:00 UTC | netfilter: ecache: fix inverted time_after() check | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h58m0s |
| 2026-07-07 09:10 UTC | netfilter: Add bridge-fastpath | 12 | ericwouds@gmail.com | finished in 4h54m0s |
| 2026-07-07 08:57 UTC | ipvs: make destination flags atomic | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h58m0s |
| 2026-07-06 23:28 UTC | netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() | 1 | xmei5@asu.edu | finished in 2h51m0s |
| 2026-07-06 15:52 UTC | netfilter: handle unreadable frags | 1 | fw@strlen.de | finished in 5h50m0s |
| 2026-07-06 15:10 UTC | ipvs: ensure inner headers in ICMP errors are in headroom | 1 | ja@ssi.bg | finished in 6h6m0s |
| 2026-07-06 12:30 UTC | netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet | 1 | fw@strlen.de | finished in 2h55m0s |
| 2026-07-06 11:48 UTC | netfilter: nf_conncount: fix zone comparison in tuple dedup | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h13m0s |
| 2026-07-06 10:16 UTC | ipvs: use parsed transport offsets in state handlers | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h28m0s |
| 2026-07-06 10:02 UTC | netfilter: ebtables: zero chainstack array | 1 | fw@strlen.de | finished in 4h57m0s |
| 2026-07-06 10:01 UTC | netfilter: ebtables: module names must be null-terminated | 1 | fw@strlen.de | finished in 5h17m0s |
| 2026-07-05 23:36 UTC | netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag | 1 | xmei5@asu.edu | finished in 4h55m0s |
| 2026-07-05 21:58 UTC | netfilter: ebtables: terminate table name before find_table_lock() | 1 | xmei5@asu.edu | finished in 4h26m0s |
| 2026-07-05 12:56 UTC | ipvs: skip IPv6 extension headers in TCP state lookup | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h25m0s |
| 2026-07-05 12:30 UTC | ipvs: skip IPv6 extension headers in SCTP state lookup | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h6m0s |
| 2026-07-04 09:29 UTC | netfilter: ebtables: must null-terminate name | 1 | fw@strlen.de | finished in 5h11m0s |
| 2026-07-04 08:48 UTC | netfilter: ebtables: shashiko nitpicks | 1 | fw@strlen.de | finished in 5h17m0s |
| 2026-07-04 07:31 UTC | netfilter: xt_tcpmss: extend checkentry to ipv6 | 1 | fw@strlen.de | finished in 1h38m0s |
| 2026-07-04 06:22 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 1 | bestswngs@gmail.com | finished in 4h51m0s |
| 2026-07-03 16:22 UTC | netfilter: nft_lookup: fix catchall element handling with inverted lookups | 1 | ty@000ty.net | finished in 4h0m0s |
| 2026-07-03 14:10 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 4 | lorenzo@kernel.org | finished in 4h55m0s |
| 2026-07-03 12:57 UTC | netfilter: updates for net | 1 | fw@strlen.de | finished in 4h29m0s |
| 2026-07-03 07:32 UTC | netfilter: xt_time: reject pre-epoch calendar matching | 1 | enjou1224z@gmail.com | finished in 4h25m0s |
| 2026-07-03 05:04 UTC | netfilter: xt_connmark: reject invalid shift parameters | 1 | enjou1224z@gmail.com | finished in 4h51m0s |
| 2026-07-02 13:46 UTC | netfilter: ipset: gc, backlog and cidr patches | 1 | kadlec@netfilter.org | finished in 5h18m0s |
| 2026-07-02 12:36 UTC | segtree: fix get element command with open intervals | 1 | pablo@netfilter.org | skipped |
| 2026-07-02 12:33 UTC | netfilter: nft_set_rbtree: get command skips end element with open interval | 1 | pablo@netfilter.org | finished in 5h6m0s |
| 2026-07-02 11:28 UTC | ipvs: reset full ip_vs_seq structs in ip_vs_conn_new | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 2h39m0s |
| 2026-07-02 10:49 UTC | netfilter: updates for net-next | 1 | fw@strlen.de | finished in 2h38m0s |
| 2026-07-02 10:10 UTC | ipvs: Move defense_work and est_reload_work to system_dfl_long_wq | 2 | iluceno@suse.de | finished in 1h34m0s |
| 2026-07-02 07:34 UTC | ipvs: fix PMTU for GUE/GRE tunnel ICMP errors | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h41m0s |
| 2026-07-01 21:25 UTC | ipvs: do not propagate one_packet flag to hashed conns | 2 | ja@ssi.bg | finished in 4h33m0s |
| 2026-07-01 10:46 UTC | netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates | 1 | pablo@netfilter.org | finished in 4h36m0s |
| 2026-07-01 10:09 UTC | netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop | 2 | running910@gmail.com | finished in 30m0s |
| 2026-07-01 06:59 UTC | ipvs: fix PMTU for GUE/GRE tunnel ICMP errors | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h25m0s |
| 2026-07-01 06:29 UTC | netfilter: nf_nat_sip: reload possible stale data pointer | 1 | fw@strlen.de | finished in 2h34m0s |
| 2026-07-01 04:37 UTC | netfilter: nft_ct: support expectation creation for natted flows | 4 | fw@strlen.de | finished in 4h41m0s |
| 2026-06-30 19:36 UTC | ipvs: do not propagate one_packet flag to hashed conns | 1 | ja@ssi.bg | finished in 5h10m0s |
| 2026-06-30 19:09 UTC | netfilter: nft_ct: support expectation creation for natted flows | 3 | fw@strlen.de | finished in 5h0m0s |
| 2026-06-30 15:55 UTC | netfilter: nft_set_rbtree: reject interval-end get for open intervals | 1 | mlbnkm1@gmail.com | finished in 4h42m0s |
| 2026-06-30 06:57 UTC | netfilter: nf_flow_table_path: L2 bridge offload | 2 | pawlik.dan@gmail.com | finished in 4h32m0s |
| 2026-06-30 06:03 UTC | netfilter: nft_ct: support expectation creation for natted flows | 2 | fw@strlen.de | finished in 4h59m0s |
| 2026-06-30 04:52 UTC | netfilter: updates for net | 1 | fw@strlen.de | finished in 4h29m0s |
| 2026-06-29 14:39 UTC | flowtable fixes for ipip tunnels | 1 | pablo@netfilter.org | finished in 4h29m0s |
| 2026-06-29 13:46 UTC | netfilter: nft_ct: support expectation creation for natted flows | 1 | fw@strlen.de | finished in 4h46m0s |
| 2026-06-29 12:58 UTC | netfilter: conntrack: remove obsolete module parameters | 2 | fw@strlen.de | finished in 5h0m0s |
| 2026-06-29 12:32 UTC | netfilter: nf_flow_table_path: L2 bridge offload | 1 | pawlik.dan@gmail.com | finished in 4h44m0s |
| 2026-06-29 10:53 UTC | netfilter: nft_fib: reject fib expression on the netdev egress hook | 2 | theodorlarionov@gmail.com | finished in 4h11m0s |