Advanced Filters
Published Title Version Author Status
2026-10-06 23:12 UTC netfilter: nft_ct: validate hook and priority for ct zone set 1 fw@strlen.de finished in 4h22m0s
2026-10-06 23:04 UTC selftests: netfilter: fix return value in zone subtest 1 fw@strlen.de skipped
2026-10-06 20:48 UTC doc: add MPTCP subtypes documentation to man page 2 fmancera@suse.de skipped
2026-10-06 08:58 UTC netfilter: nf_conntrack: add ct expression support for netdev egress chains 1 hari.chandrakanthan@oss.qualcomm.com finished in 4h11m0s
2026-10-06 06:53 UTC netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode 2 subhampal789@gmail.com skipped
2026-10-05 23:08 UTC ipvs: add per-service secure_tcp 6 adrianox@gmail.com finished in 3h52m0s
2026-10-05 20:04 UTC netfilter: nft_set_rbtree: reject expired interval ends 1 jeremy.jean@oss.cyber.gouv.fr finished in 3h58m0s
2026-10-05 15:12 UTC netfilter: nft_synproxy: only handle pure SYN and ACK packets 2 ngocthang2710.1999@gmail.com finished in 4h7m0s
2026-10-05 13:06 UTC ipvs: avoid stack overflow from recursive connection expiration 6 zihanx@nebusec.ai finished in 4h21m0s
2026-10-04 22:17 UTC netfilter: flowtable: set on NF_FLOW_HW once flow has been offloaded 1 pablo@netfilter.org finished in 3h55m0s
2026-10-04 21:24 UTC netfilter: preserve bridge egress VLAN tags 2 parri.andrea@gmail.com finished in 4h1m0s
2026-10-04 19:59 UTC set: Check array boundary when parsing NFTA_SET_DESC_CONCAT 1 pablo@netfilter.org skipped
2026-10-04 17:16 UTC netfilter: flowtable: carry a priority into the offload 3 julius@bairaktaris.de finished in 3h57m0s
2026-10-04 17:16 UTC netfilter: offload a TCP flow whose reply is never seen 2 julius@bairaktaris.de finished in 4h2m0s
2026-10-04 17:16 UTC netfilter: flowtable: update upper device stats in the fast path 1 julius@bairaktaris.de finished in 4h1m0s
2026-10-04 17:16 UTC netfilter: flowtable: tear down bridged flows on layer 2 roaming 6 julius@bairaktaris.de finished in 4h12m0s
2026-10-04 16:06 UTC netfilter: nft_synproxy: only handle pure SYN and ACK packets 1 ngocthang2710.1999@gmail.com finished in 4h11m0s
2026-10-03 09:50 UTC ipvs: do not create conns from packets with port 0 1 ja@ssi.bg finished in 3h47m0s
2026-10-02 20:10 UTC netfilter: nf_nat: replace u_int16_t with u16 1 carlos@carlosgrillet.me skipped
2026-10-02 16:56 UTC netfilter: conntrack: reject nested ctnetlink master chains 2 4ncienth@gmail.com finished in 3h58m0s
2026-10-02 14:45 UTC Fix for warnings when compiling for 32bit arch 2 phil@nwl.cc skipped
2026-10-02 12:49 UTC extensions: libxt_conntrack: Fix inverted ctstate translation 1 phil@nwl.cc skipped
2026-10-02 12:41 UTC netfilter: nfnetlink_log: collapse both dev log blocks 1 fw@strlen.de finished in 3h49m0s
2026-10-02 08:42 UTC netfilter: flowtable: use the vlan id, not the full tci, in the tuple key 1 huangya90@gmail.com finished in 4h4m0s
2026-10-01 18:02 UTC netfilter: conntrack: avoid recursive master destruction 1 4ncienth@gmail.com finished in 4h20m0s
2026-10-01 12:06 UTC netfilter: do not assume skb->sk is inet sk 1 fw@strlen.de finished in 4h25m0s
2026-09-30 20:54 UTC netfilter: ip6t_NPT: ensure skb is writable before header modification 2 joasantonio108@gmail.com skipped
2026-09-30 18:09 UTC netfilter: ip6t_NPT: ensure skb is writable before header modification 1 joasantonio108@gmail.com skipped
2026-09-30 07:14 UTC net: bridge: vlan: optimize standard fdb fwding path 1 razor@blackwall.org finished in 4h6m0s
2026-09-29 17:07 UTC ipvs: prevent LBLCR destination leak after entry expiry 1 tjdqudcks0424@naver.com finished in 4h9m0s
2026-09-29 14:59 UTC netfilter: nf_tables: switch chain_types array to rcu 1 fw@strlen.de finished in 4h11m0s
2026-09-29 14:14 UTC doc: add MPTCP subtypes documentation to man page 1 fmancera@suse.de skipped
2026-09-29 13:09 UTC netfilter: conntrack: fix unlikely UaF in gc worker 1 fw@strlen.de finished in 4h52m0s
2026-09-29 12:58 UTC netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns 5 zihanx@nebusec.ai finished in 4h6m0s
2026-09-29 11:34 UTC ipvs: read conn fields during sync atomically 2 ja@ssi.bg finished in 4h25m0s
2026-09-29 09:00 UTC netfilter: nf_conntrack_reasm: avoid truncating header offset 1 tjdqudcks0424@naver.com finished in 3h46m0s
2026-09-28 18:58 UTC netfilter: nf_queue: limit the hook drop flush to the unregistered hook point 2 aojea@google.com finished in 3h46m0s
2026-09-28 17:33 UTC netfilter: conntrack: shared port parser for helpers 5 rc@rexion.ai finished in 3h51m0s
2026-09-28 16:18 UTC netfilter: br_netfilter: restore VLAN tag on refragmented IPv6 packets 1 parri.andrea@gmail.com finished in 4h0m0s
2026-09-28 12:46 UTC net: cap skb->queue_mapping when the tx queue is picked 4 jhs@mojatatu.com finished in 1h5m0s
2026-09-28 08:28 UTC netfilter: ebtables: ebt_802_3: drop short frames before the match reads LLC 1 guozh23@xiaopeng.com finished in 2h26m0s
2026-09-27 22:34 UTC Netfilter updates for net-next 1 pablo@netfilter.org finished in 4h4m0s
2026-09-27 22:08 UTC Netfilter/IPVS fixes for net 1 pablo@netfilter.org finished in 4h16m0s
2026-09-27 16:32 UTC netfilter: flowtable: flush delete work after final GC 2 nicoyip.dev@gmail.com finished in 4h5m0s
2026-09-27 07:15 UTC netfilter: nf_tables: serialize offload stats with callback unbind 1 nicoyip.dev@gmail.com finished in 5h5m0s
2026-09-27 06:24 UTC ipvs: fix protocol data lifetime during namespace teardown 1 nicoyip.dev@gmail.com finished in 1h55m0s
2026-09-27 04:31 UTC netfilter: x_tables: avoid holding mutex over faultable user copies 4 zihanx@nebusec.ai finished in 4h6m0s
2026-09-26 20:45 UTC netfilter: ip6t_SYNPROXY: check TCP header before verifying checksum 1 raghunathpalla.0209@gmail.com finished in 3h49m0s
2026-09-26 17:52 UTC netfilter: conntrack: wait for RCU readers before freeing the hash 1 nicoyip.dev@gmail.com finished in 4h7m0s
2026-09-26 17:51 UTC ipvs: Defer application parent freeing until after RCU readers 1 nicoyip.dev@gmail.com finished in 4h2m0s
2026-09-26 09:19 UTC netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns 4 zihanx@nebusec.ai finished in 3h59m0s
2026-09-25 19:36 UTC ipvs: wait grace period while reusing dest from trash 2 weir@nebusec.ai finished in 3h56m0s
2026-09-25 16:40 UTC ipvs: avoid stack overflow from recursive connection expiration 5 zihanx@nebusec.ai finished in 3h58m0s
2026-09-25 14:11 UTC ipvs: fix OOB write when NATing ICMPv6 errors quoting non-first fragments 1 axel.mierczuk@1password.com finished in 4h19m0s
2026-09-25 14:11 UTC ipvs: keep templates and cport 0 conns away from packet lookups 1 axel.mierczuk@1password.com finished in 4h0m0s
2026-09-25 13:51 UTC expr: add support to math expression 5 fmancera@suse.de skipped
2026-09-25 13:49 UTC netfilter: nf_tables: add math expression support 6 fmancera@suse.de finished in 2h24m0s
2026-09-24 20:25 UTC netfilter: nf_flow_table_bpf: populate VLAN encap in XDP flowtable lookup 1 adrianox@gmail.com finished in 3h18m0s
2026-09-24 20:13 UTC netfilter: nft_reject: prevent unbounded recursion in output hooks 3 fmancera@suse.de finished in 4h0m0s
2026-09-23 19:50 UTC netfilter: flowtable: restore wireless forward path 1 pablo@netfilter.org finished in 55m0s
[1 findings]
2026-09-23 12:27 UTC netfilter: conntrack: add and use nf_ct_get_real() 2 fw@strlen.de finished in 4h1m0s
2026-09-23 10:54 UTC netfilter: conntrack: add and use nf_ct_get_real() 1 fw@strlen.de finished in 4h17m0s
2026-09-23 09:54 UTC ipvs: avoid stack overflow from recursive connection expiration 4 zihanx@nebusec.ai finished in 4h18m0s
2026-09-23 04:23 UTC netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode 1 subhampal789@gmail.com skipped
2026-09-22 19:18 UTC netfilter: bpf: reject invalid NAT manipulation types 1 fmancera@suse.de finished in 4h4m0s
2026-09-22 17:39 UTC netfilter: ecache: bound destroy event redelivery 1 weir@nebusec.ai finished in 3h46m0s
2026-09-22 16:40 UTC netfilter: nft_nat: use the right enum members for nat type switch 1 fmancera@suse.de finished in 1h3m0s
2026-09-22 09:52 UTC netfilter: nf_dup: disable duplication in user namespaces 3 zihanx@nebusec.ai finished in 5h23m0s
2026-09-22 09:25 UTC netfilter: nft_reject: prevent unbounded recursion in output hooks 2 fmancera@suse.de finished in 4h33m0s
2026-09-22 09:08 UTC ipvs: skip committing sync_threshold when proc_dointvec fails 1 joel.granados@kernel.org finished in 4h0m0s
2026-09-22 06:23 UTC netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets 3 lvjunyu@cmss.chinamobile.com finished in 4h29m0s
2026-09-22 03:03 UTC net: prevent partial checksums from modifying network headers 6 habte.yibelo@gmail.com finished in 4h2m0s
2026-09-21 22:29 UTC netfilter: nft_reject: prevent unbounded recursion in output hooks 1 fmancera@suse.de finished in 4h3m0s
2026-09-21 20:57 UTC ipvs: add per-service secure_tcp 5 adrianox@gmail.com finished in 3h58m0s
2026-09-21 14:55 UTC ovs, net/sched: fixes for UAF after conntrack extension realloc 1 i.maximets@ovn.org finished in 4h24m0s
2026-09-21 13:03 UTC netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets 2 lvjunyu@cmss.chinamobile.com finished in 4h1m0s
2026-09-21 02:53 UTC net: prevent partial checksums from modifying network headers 5 habte.yibelo@gmail.com finished in 3h47m0s
2026-09-21 02:08 UTC netfilter: nft_set_rbtree: skip transaction elements during GC 1 bestswngs@gmail.com finished in 4h20m0s
2026-09-20 11:58 UTC netfilter: x_tables: avoid holding mutex over faultable user copies 3 zihanx@nebusec.ai finished in 5h6m0s
2026-09-20 09:31 UTC ipvs: avoid stack overflow from recursive connection expiration 3 zihanx@nebusec.ai finished in 5h25m0s
2026-09-20 07:45 UTC netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets 1 lvjunyu@cmss.chinamobile.com finished in 4h14m0s
2026-09-20 05:47 UTC ipvs: add per-service secure_tcp 4 adrianox@gmail.com finished in 3h51m0s
2026-09-19 21:52 UTC netfilter: nf_nat: fix unsigned range_size underflow for ICMP and GRE when max < min 1 benquike@gmail.com finished in 4h12m0s
2026-09-19 21:52 UTC netfilter: nfnetlink_log: fix config error handling, SIT headroom OOB read, and nlmsg rollback 1 benquike@gmail.com finished in 4h4m0s
2026-09-19 18:07 UTC ipvs: filter some connection flags 2 ja@ssi.bg finished in 4h1m0s
2026-09-19 03:34 UTC netfilter: nf_tables: defer object destruction on abort past commit_mutex 2 ngocthang2710.1999@gmail.com finished in 4h33m0s
2026-09-19 03:29 UTC netfilter: nf_tables: defer object destruction on abort past commit_mutex 1 ngocthang2710.1999@gmail.com finished in 4h34m0s
2026-09-18 18:31 UTC selftests: netfilter: nft_queue.sh: only queue icmp echo request/reply 1 kuba@kernel.org skipped
2026-09-18 14:58 UTC netfilter: harden conntrack vs ingress pipeline rewrites 3 fw@strlen.de finished in 1h44m0s
2026-09-18 11:53 UTC netfilter: flowtable: generalize pending status bit 1 pablo@netfilter.org finished in 56m0s
[1 findings]
2026-09-18 09:26 UTC netfilter: nf_ip6_checksum: validate checksum offset 1 weir@nebusec.ai finished in 4h25m0s
2026-09-18 06:18 UTC netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers 5 running910@gmail.com finished in 3h54m0s
2026-09-17 17:37 UTC Fix for warnings when compiling for 32bit arch 1 phil@nwl.cc skipped
2026-09-17 17:31 UTC doc: nft.8: Describe nftables transactions and their limitations 1 phil@nwl.cc skipped
2026-09-17 13:09 UTC netfilter: harden conntrack vs ingress pipeline rewrites 2 fw@strlen.de finished in 4h44m0s
2026-09-17 08:29 UTC net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload 3 lorenzo.bianconi@oss.qualcomm.com finished in 3h46m0s
2026-09-17 03:02 UTC ipvs: avoid stack overflow from recursive connection expiration 2 zihanx@nebusec.ai finished in 4h11m0s
2026-09-17 02:17 UTC selftests: net: update netfilter netlink config 1 hangbin.liu@linux.dev skipped
2026-09-16 23:16 UTC Netfilter/IPVS fixes for net 1 pablo@netfilter.org finished in 4h6m0s
2026-09-16 22:00 UTC netfilter: nfnetlink_queue: hash queue instance by portid too 1 pablo@netfilter.org finished in 4h22m0s