| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-08-29 05:19 UTC | netfilter: nf_dup: prevent asynchronous duplicate recursion | 1 | zihanx@nebusec.ai | finished in 5h14m0s |
| 2026-08-28 15:22 UTC | netfilter: ipset: rhashtable conversion | 3 | fw@strlen.de | finished in 4h42m0s |
| 2026-08-27 20:48 UTC | netfilter: nf_tables: Fix netdev hook sanity checks | 1 | phil@nwl.cc | skipped |
| 2026-08-27 20:42 UTC | tests: shell: Test odd netdev hook updates | 1 | phil@nwl.cc | skipped |
| 2026-08-27 20:38 UTC | netfilter: nfnetlink: Fix for interrupted hook dumps | 1 | phil@nwl.cc | finished in 5h1m0s |
| 2026-08-27 18:14 UTC | netfilter: disable br_netfilter in user namespaces | 2 | fw@strlen.de | finished in 4h11m0s |
| 2026-08-27 17:45 UTC | netfilter: bridge: verify device is a bridge port | 1 | fw@strlen.de | finished in 4h37m0s |
| 2026-08-27 17:41 UTC | netfilter: disable br_netfilter in user namespaces | 1 | fw@strlen.de | finished in 4h8m0s |
| 2026-08-27 10:32 UTC | netfilter: nf_tables: fix device name and prefix match in hook lookup | 4 | fmancera@suse.de | finished in 4h12m0s |
| 2026-08-27 00:09 UTC | netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited() | 1 | pablo@netfilter.org | skipped |
| 2026-08-26 22:01 UTC | netlink: specs: fixes for conntrack dump filtering | 2 | i.maximets@ovn.org | skipped |
| 2026-08-26 13:32 UTC | netfilter: nf_tables: fix device name and prefix match in hook lookup | 3 | fmancera@suse.de | finished in 4h36m0s |
| 2026-08-25 23:50 UTC | netfilter: flowtable: defer ct stats sync via worker | 1 | pablo@netfilter.org | finished in 4h0m0s |
| 2026-08-25 20:02 UTC | netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race | 2 | blbllhy@gmail.com | finished in 4h5m0s |
| 2026-08-25 19:10 UTC | payload: restore is_raw flag for th expressions parsed from udata | 1 | adrian@changeover.za.net | skipped |
| 2026-08-25 15:58 UTC | netlink: specs: fix the conntrack filter type | 1 | i.maximets@ovn.org | skipped |
| 2026-08-25 15:27 UTC | net: netfilter: report NLM_F_DUMP_FILTERED when all is filtered out | 1 | i.maximets@ovn.org | finished in 4h31m0s |
| 2026-08-25 13:28 UTC | netfilter: ipset: rhashtable conversion | 2 | fw@strlen.de | finished in 5h30m0s |
| 2026-08-25 13:11 UTC | netfilter: ip6_tables: set F_PROTO when proto value is nonzero | 1 | fw@strlen.de | finished in 5h37m0s |
| 2026-08-25 10:28 UTC | netfilter: arp_tables: remove the 32bit compat interface | 1 | fw@strlen.de | skipped |
| 2026-08-25 10:24 UTC | tests: shell: Add coverage for nf_connlabels_replace() | 1 | jpeska@redhat.com | skipped |
| 2026-08-25 09:10 UTC | netfilter: nft_nat: fully initialise new_addr in netmap setup | 1 | theodorlarionov@gmail.com | finished in 58m0s |
| 2026-08-25 01:36 UTC | netfilter: nfnetlink_queue: hold nfnl mutex in event notifier | 1 | fw@strlen.de | finished in 4h30m0s |
| 2026-08-25 01:36 UTC | netfilter: nfnetlink_log: cope with concurrent instance destruction | 1 | fw@strlen.de | finished in 3h54m0s |
| 2026-08-24 22:19 UTC | netfilter: lwtunnel: expose read-only sysctl nf_hooks_lwtunnel for non init-netns | 1 | pablo@netfilter.org | finished in 4h3m0s |
| 2026-08-24 21:29 UTC | segtree: assert on value expressions | 1 | pablo@netfilter.org | skipped |
| 2026-08-24 19:28 UTC | netfilter: nft_payload: restrict checksum offsets to known values | 1 | fw@strlen.de | finished in 4h42m0s |
| 2026-08-24 16:03 UTC | netfilter: ipset: rhashtable conversion | 1 | fw@strlen.de | finished in 5h7m0s |
| 2026-08-24 12:12 UTC | netfilter: cttimeout: prevent UAF during module unload | 1 | nicoyip.dev@gmail.com | skipped |
| 2026-08-24 11:58 UTC | netfilter: flowtable: flush delete work after final GC | 1 | nicoyip.dev@gmail.com | finished in 5h1m0s |
| 2026-08-24 09:28 UTC | netfilter: nf_tables: fix device name and prefix match in hook lookup | 2 | fmancera@suse.de | finished in 4h18m0s |
| 2026-08-24 02:32 UTC | netfilter: nf_conntrack_h323: fix double cursor advance in decode_int() | 2 | l1138897701@163.com | finished in 2h24m0s |
| 2026-08-23 17:05 UTC | netfilter: nf_log: unregister loggers before per-net teardown | 2 | nicoyip.dev@gmail.com | skipped |
| 2026-08-22 21:40 UTC | netfilter: nf_conntrack: avoid truncating IPv6 nexthdr offset | 1 | jeremy.jean@oss.cyber.gouv.fr | finished in 4h25m0s |
| 2026-08-22 21:09 UTC | netfilter: bpf: disallow conntrack kfuncs for token programs | 1 | jeremy.jean@oss.cyber.gouv.fr | finished in 2h20m0s |
| 2026-08-22 18:46 UTC | netfilter: nf_log: clear per-net loggers on unregister | 1 | nicoyip.dev@gmail.com | skipped |
| 2026-08-21 15:38 UTC | Netfilter fixes for net | 1 | pablo@netfilter.org | finished in 4h29m0s |
| 2026-08-21 14:38 UTC | netfilter: x_tables: use GFP_KERNEL_ACCOUNT in match/target | 1 | pablo@netfilter.org | skipped |
| 2026-08-21 13:41 UTC | netfilter: x_tables: reject missing '-p' flag and check for INV flag | 1 | fw@strlen.de | finished in 4h7m0s |
| 2026-08-21 13:33 UTC | ipv4: start using dst_dev_rcu() | 1 | miguel.gazquez@bootlin.com | skipped |
| 2026-08-21 13:29 UTC | netfilter: x_tables: require IP6T_F_PROTO when matching protocol | 1 | pablo@netfilter.org | finished in 3h56m0s |
| 2026-08-21 11:19 UTC | netfilter: nf_tables: remove leftover set_update_list | 1 | pablo@netfilter.org | finished in 4h0m0s |
| 2026-08-21 10:49 UTC | netfilter: nf_tables: skip double clone set expressions on element insert | 1 | pablo@netfilter.org | finished in 4h19m0s |
| 2026-08-21 09:50 UTC | netfilter: osf: remove unreachable break in nf_osf_ttl() | 2 | xiaolinkui@126.com | skipped |
| 2026-08-21 06:52 UTC | netfilter: nf_conntrack_h323: fix double cursor advance in decode_int() | 1 | l1138897701@163.com | finished in 2h18m0s |
| 2026-08-21 02:28 UTC | netfilter: osf: remove unreachable break in nf_osf_ttl() | 1 | xiaolinkui@126.com | skipped |
| 2026-08-20 12:57 UTC | netfilter: conntrack: fix nf_conntrack_expect_max default value in documentation | 1 | sunshaojie@kylinos.cn | skipped |
| 2026-08-20 01:06 UTC | netfilter: ipset: list:set: defer ip_set_put_byindex to RCU callback | 1 | blbllhy@gmail.com | finished in 4h27m0s |
| 2026-08-19 18:16 UTC | sysctl: add module aliases | 3 | mfo@igalia.com | skipped |
| 2026-08-19 13:09 UTC | netfilter: nf_tables: skip double clone set expressions on element insert | 1 | pablo@netfilter.org | finished in 3h54m0s |
| 2026-08-19 02:28 UTC | sysctl: add module aliases | 2 | mfo@igalia.com | skipped |
| 2026-08-18 22:31 UTC | netfilter: nft_dynset: missing .clone_destroy call when honoring set expression | 1 | pablo@netfilter.org | finished in 4h5m0s |
| 2026-08-18 20:16 UTC | ipvs: backport cdcc4e46180d | 1 | ja@ssi.bg | skipped |
| 2026-08-18 20:00 UTC | netfilter: flowtable: publish HW_DEAD after worker is done | 1 | jeremy.jean@oss.cyber.gouv.fr | finished in 4h19m0s |
| 2026-08-18 13:31 UTC | netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() | 3 | joasantonio108@gmail.com | finished in 2h36m0s |
| 2026-08-18 12:27 UTC | netfilter: x_tables: remove pr_debug in matches/targets | 1 | pablo@netfilter.org | finished in 4h6m0s |
| 2026-08-18 10:18 UTC | netfilter: nf_tables: fix device name and prefix match in hook lookup | 1 | fmancera@suse.de | finished in 4h52m0s |
| 2026-08-18 01:56 UTC | netfilter: xt_IDLETIMER: fix out-of-bounds heap read in checkentry | 1 | weir@nebusec.ai | skipped |
| 2026-08-17 23:29 UTC | Netfilter/IPVS fixes for net-next | 1 | pablo@netfilter.org | finished in 3h59m0s |
| 2026-08-17 17:22 UTC | lib/folio_pool: Direct-Map Large Folio Pool & Scratchpad bump allocators | 1 | devnull@kernel.org |
finished
in 1h17m0s
[1 findings] |
| 2026-08-17 07:14 UTC | ipvs: bound LBLCR and LBLC cache growth | 2 | zhilinz@nebusec.ai | finished in 4h8m0s |
| 2026-08-16 17:05 UTC | lib/textsearch: fix ts_bm resume offset, add tests, two small cleanups | 1 | bernard.ladenthin@gmail.com | finished in 3h50m0s |
| 2026-08-16 15:22 UTC | ipvs: bound LBLCR cache growth | 1 | zhilinz@nebusec.ai | finished in 4h26m0s |
| 2026-08-15 20:57 UTC | x86: add missing vzeroupper instructions | 1 | ebiggers@kernel.org | skipped |
| 2026-08-15 13:31 UTC | netfilter: nf_conntrack_sip: fix OOB read in ct_sip_parse_transport() | 1 | joasantonio108@gmail.com | finished in 2h24m0s |
| 2026-08-14 21:10 UTC | evaluate: reject negative values for unsigned datatypes | 2 | avinash.duduskar@gmail.com | skipped |
| 2026-08-14 19:25 UTC | netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() | 2 | joasantonio108@gmail.com | skipped |
| 2026-08-14 19:17 UTC | netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() | 1 | joasantonio108@gmail.com | skipped |
| 2026-08-13 23:04 UTC | tests: runtest.sh: do kmemleak scan if available | 1 | fw@strlen.de | skipped |
| 2026-08-13 20:48 UTC | Change skb secmarks to x-array indexes | 1 | casey@schaufler-ca.com | finished in 5h7m0s |
| 2026-08-13 18:34 UTC | ipvs: fix integer overflow in ftp helper port/address parsing | 2 | joasantonio108@gmail.com | finished in 5h6m0s |
| 2026-08-13 16:59 UTC | ipvs: fix integer overflow in ftp helper port/address parsing | 1 | joasantonio108@gmail.com | finished in 1h20m0s |
| 2026-08-13 14:10 UTC | netfilter: nf_conntrack_h323: fix OOB read in get_bitmap() | 1 | joasantonio108@gmail.com | skipped |
| 2026-08-13 11:45 UTC | tests: shell: Keep dumps with numeric protocol values | 1 | phil@nwl.cc | skipped |
| 2026-08-13 00:12 UTC | netfilter: flowtable: add and use NF_FLOW_CONFIRMED bit | 1 | pablo@netfilter.org | finished in 3h59m0s |
| 2026-08-12 23:51 UTC | netfilter: nf_tables: move hardware offload step after building the chain blob | 1 | pablo@netfilter.org | skipped |
| 2026-08-12 23:33 UTC | netfilter: ctnetlink: do not expose expectation DEAD flag | 1 | pablo@netfilter.org | finished in 4h3m0s |
| 2026-08-12 23:04 UTC | netfilter: nf_tables: move set_update_list to nftables per-netns | 1 | pablo@netfilter.org | finished in 4h13m0s |
| 2026-08-11 13:43 UTC | parser_json: fix JSON delete of ct stateful objects | 1 | palotasgergely@gmail.com | skipped |
| 2026-08-10 22:17 UTC | netfilter: nft_ct: validate timeout object protocol | 1 | kylebot@openai.com | finished in 5h0m0s |
| 2026-08-10 22:16 UTC | netfilter: nf_conntrack: validate template helper protocol | 1 | kylebot@openai.com | finished in 4h5m0s |
| 2026-08-10 19:40 UTC | Netfilter updates for net | 1 | pablo@netfilter.org | finished in 4h28m0s |
| 2026-08-10 19:06 UTC | Netfilter/IPVS fixes for net | 1 | pablo@netfilter.org | finished in 4h13m0s |
| 2026-08-10 16:07 UTC | netfilter: nf_reject: initialize IPCB at inet ingress | 2 | david.lee@trailofbits.com | finished in 4h54m0s |
| 2026-08-10 13:01 UTC | net: sysctl: Const Qualify sysctl ctl_table arrays | 4 | joel.granados@kernel.org | finished in 4h5m0s |
| 2026-08-10 11:35 UTC | netfilter: nf_tables: don't queue packet path object notifications | 1 | littleddfu@gmail.com | finished in 4h18m0s |
| 2026-08-10 10:34 UTC | netfilter: nf_conntrack_expect: bail out on insert dead expectations | 1 | pablo@netfilter.org | finished in 4h36m0s |
| 2026-08-10 08:37 UTC | netfilter: conntrack: always lower timeout for non-closing RST packets | 1 | pablo@netfilter.org | finished in 4h12m0s |
| 2026-08-08 12:40 UTC | netfilter: flowtable: publish GC-visible tuple last | 1 | jeremy.jean@oss.cyber.gouv.fr | finished in 3h59m0s |
| 2026-08-08 01:33 UTC | tests: shell: use an unassigned protocol number in exclusive_start_cond | 1 | avinash.duduskar@gmail.com | skipped |
| 2026-08-08 01:33 UTC | evaluate: reject negative values for unsigned datatypes | 1 | avinash.duduskar@gmail.com | skipped |
| 2026-08-07 08:45 UTC | netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers | 4 | running910@gmail.com | finished in 4h18m0s |
| 2026-08-07 07:59 UTC | selftests: netfilter: conntrack_dump_flush: remove unused variables and fix typo | 2 | fffsqian@163.com | skipped |
| 2026-08-07 00:28 UTC | netfilter: ipset: remove need to allocate memory on delete operations operations | 4 | fw@strlen.de | finished in 5h3m0s |
| 2026-08-06 22:35 UTC | flowtable preparation for IPv4 over IPv6 and SIT | 1 | pablo@netfilter.org | finished in 4h47m0s |
| 2026-08-06 20:22 UTC | netfilter: ipset: remove need to allocate memory on delete operations | 3 | fw@strlen.de | finished in 4h24m0s |
| 2026-08-06 18:50 UTC | netlink_linearize: size nat register allocation by address expression | 1 | adrian@changeover.za.net | skipped |
| 2026-08-06 17:41 UTC | netfilter: ipset: remove need to allocate memory on delete operations | 2 | fw@strlen.de | finished in 4h38m0s |
| 2026-08-06 16:11 UTC | netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path | 1 | a.velichayshiy@ispras.ru | finished in 4h36m0s |
| 2026-08-06 14:17 UTC | netfilter: ipset: let destroy callbacks adjust ext mem size | 1 | fw@strlen.de | finished in 4h3m0s |