| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-07-10 14:37 UTC | netfilter: updates for net | 1 | fw@strlen.de | finished in 5h7m0s |
| 2026-07-10 13:27 UTC | netfilter: nf_nat: recalculate TCP TS offset after SNAT port rewrite | 3 | xietangxin@h-partners.com | finished in 4h51m0s |
| 2026-07-10 10:47 UTC | netfilter: x_physdev: masks are not c-strings | 1 | fw@strlen.de | finished in 4h39m0s |
| 2026-07-10 07:36 UTC | netfilter: flowtable: tear down flow entries with stale dst from GC | 1 | pablo@netfilter.org | finished in 5h6m0s |
| 2026-07-09 20:23 UTC | ipvs: fix the checksum validations | 1 | ja@ssi.bg | finished in 5h14m0s |
| 2026-07-09 20:03 UTC | test updates | 1 | fw@strlen.de | skipped |
| 2026-07-09 19:46 UTC | Address Sashiko review of NAT hook dump code | 2 | phil@nwl.cc | finished in 3h4m0s |
| 2026-07-09 16:53 UTC | mnl: support RLIMIT_NOFILE soft limit > FD_SETSIZE | 1 | csnider@mirantis.com | skipped |
| 2026-07-09 13:12 UTC | netfilter: nf_nat: recalculate TCP TS offset when snat change sport | 2 | xietangxin@h-partners.com | finished in 4h57m0s |
| 2026-07-09 11:40 UTC | netfilter: flowtable: use correct direction to set up tunnel route | 1 | pablo@netfilter.org | finished in 5h7m0s |
| 2026-07-09 08:52 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 5 | lorenzo@kernel.org | finished in 5h8m0s |
| 2026-07-09 06:30 UTC | netfilter: ip6tables: set hotdrop for malformed extension header matches | 1 | running910@gmail.com | finished in 5h17m0s |
| 2026-07-08 23:35 UTC | parser_json: initialize geneve options list for empty tunnel array | 1 | omkhar@linkedin.com | skipped |
| 2026-07-08 20:54 UTC | netfilter: flowtable: tear down HW offloaded flows on FIB route changes | 1 | anzaki@gmail.com |
finished
in 6h18m0s
[1 findings] |
| 2026-07-08 18:11 UTC | netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() | 2 | xmei5@asu.edu | finished in 2h42m0s |
| 2026-07-08 18:03 UTC | ipvs: fix more places with wrong ipv6 transport offsets | 1 | ja@ssi.bg | finished in 5h1m0s |
| 2026-07-08 16:19 UTC | Address Sashiko review of NAT hook dump code | 1 | phil@nwl.cc |
finished
in 2h11m0s
[1 findings] |
| 2026-07-08 14:28 UTC | ipvs: reload ip header after head reallocation | 1 | fw@strlen.de | finished in 5h11m0s |
| 2026-07-08 14:02 UTC | netfilter: updates for net | 1 | fw@strlen.de | finished in 4h47m0s |
| 2026-07-08 12:48 UTC | net: ip6_tunnel: use tunnel parameters for fill_forward_path route lookup | 1 | lorenzo@kernel.org | finished in 5h22m0s |
| 2026-07-08 11:25 UTC | net: ipip: use tunnel parameters for fill_forward_path route lookup | 1 | lorenzo@kernel.org | finished in 5h2m0s |
| 2026-07-08 06:04 UTC | ipvs: make destination flags atomic | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h24m0s |
| 2026-07-08 05:27 UTC | netfilter: nf_conncount: fix zone comparison in tuple dedup | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h7m0s |
| 2026-07-07 19:51 UTC | netfilter: replace u_int*_t with kernel int types (batch 3) | 1 | carlos@carlosgrillet.me | skipped |
| 2026-07-07 18:25 UTC | ipvs: ensure inner headers in ICMP errors are in headroom | 2 | ja@ssi.bg | finished in 5h58m0s |
| 2026-07-07 11:18 UTC | netfilter: handle unreadable frags | 2 | fw@strlen.de | finished in 5h5m0s |
| 2026-07-07 11:00 UTC | netfilter: ecache: fix inverted time_after() check | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h58m0s |
| 2026-07-07 09:10 UTC | netfilter: Add bridge-fastpath | 12 | ericwouds@gmail.com | finished in 4h54m0s |
| 2026-07-07 08:57 UTC | ipvs: make destination flags atomic | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h58m0s |
| 2026-07-06 23:28 UTC | netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() | 1 | xmei5@asu.edu | finished in 2h51m0s |
| 2026-07-06 15:52 UTC | netfilter: handle unreadable frags | 1 | fw@strlen.de | finished in 5h50m0s |
| 2026-07-06 15:10 UTC | ipvs: ensure inner headers in ICMP errors are in headroom | 1 | ja@ssi.bg | finished in 6h6m0s |
| 2026-07-06 12:30 UTC | netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet | 1 | fw@strlen.de | finished in 2h55m0s |
| 2026-07-06 11:48 UTC | netfilter: nf_conncount: fix zone comparison in tuple dedup | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h13m0s |
| 2026-07-06 10:16 UTC | ipvs: use parsed transport offsets in state handlers | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h28m0s |
| 2026-07-06 10:02 UTC | netfilter: ebtables: zero chainstack array | 1 | fw@strlen.de | finished in 4h57m0s |
| 2026-07-06 10:01 UTC | netfilter: ebtables: module names must be null-terminated | 1 | fw@strlen.de | finished in 5h17m0s |
| 2026-07-05 23:36 UTC | netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag | 1 | xmei5@asu.edu | finished in 4h55m0s |
| 2026-07-05 21:58 UTC | netfilter: ebtables: terminate table name before find_table_lock() | 1 | xmei5@asu.edu | finished in 4h26m0s |
| 2026-07-05 12:56 UTC | ipvs: skip IPv6 extension headers in TCP state lookup | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h25m0s |
| 2026-07-05 12:30 UTC | ipvs: skip IPv6 extension headers in SCTP state lookup | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h6m0s |
| 2026-07-04 09:29 UTC | netfilter: ebtables: must null-terminate name | 1 | fw@strlen.de | finished in 5h11m0s |
| 2026-07-04 08:48 UTC | netfilter: ebtables: shashiko nitpicks | 1 | fw@strlen.de | finished in 5h17m0s |
| 2026-07-04 07:31 UTC | netfilter: xt_tcpmss: extend checkentry to ipv6 | 1 | fw@strlen.de | finished in 1h38m0s |
| 2026-07-04 06:22 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 1 | bestswngs@gmail.com | finished in 4h51m0s |
| 2026-07-03 16:22 UTC | netfilter: nft_lookup: fix catchall element handling with inverted lookups | 1 | ty@000ty.net | finished in 4h0m0s |
| 2026-07-03 14:10 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 4 | lorenzo@kernel.org | finished in 4h55m0s |
| 2026-07-03 12:57 UTC | netfilter: updates for net | 1 | fw@strlen.de | finished in 4h29m0s |
| 2026-07-03 07:32 UTC | netfilter: xt_time: reject pre-epoch calendar matching | 1 | enjou1224z@gmail.com | finished in 4h25m0s |
| 2026-07-03 05:04 UTC | netfilter: xt_connmark: reject invalid shift parameters | 1 | enjou1224z@gmail.com | finished in 4h51m0s |
| 2026-07-02 13:46 UTC | netfilter: ipset: gc, backlog and cidr patches | 1 | kadlec@netfilter.org | finished in 5h18m0s |
| 2026-07-02 12:36 UTC | segtree: fix get element command with open intervals | 1 | pablo@netfilter.org | skipped |
| 2026-07-02 12:33 UTC | netfilter: nft_set_rbtree: get command skips end element with open interval | 1 | pablo@netfilter.org | finished in 5h6m0s |
| 2026-07-02 11:28 UTC | ipvs: reset full ip_vs_seq structs in ip_vs_conn_new | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 2h39m0s |
| 2026-07-02 10:49 UTC | netfilter: updates for net-next | 1 | fw@strlen.de | finished in 2h38m0s |
| 2026-07-02 10:10 UTC | ipvs: Move defense_work and est_reload_work to system_dfl_long_wq | 2 | iluceno@suse.de | finished in 1h34m0s |
| 2026-07-02 07:34 UTC | ipvs: fix PMTU for GUE/GRE tunnel ICMP errors | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h41m0s |
| 2026-07-01 21:25 UTC | ipvs: do not propagate one_packet flag to hashed conns | 2 | ja@ssi.bg | finished in 4h33m0s |
| 2026-07-01 10:46 UTC | netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates | 1 | pablo@netfilter.org | finished in 4h36m0s |
| 2026-07-01 10:09 UTC | netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop | 2 | running910@gmail.com | finished in 30m0s |
| 2026-07-01 06:59 UTC | ipvs: fix PMTU for GUE/GRE tunnel ICMP errors | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h25m0s |
| 2026-07-01 06:29 UTC | netfilter: nf_nat_sip: reload possible stale data pointer | 1 | fw@strlen.de | finished in 2h34m0s |
| 2026-07-01 04:37 UTC | netfilter: nft_ct: support expectation creation for natted flows | 4 | fw@strlen.de | finished in 4h41m0s |
| 2026-06-30 19:36 UTC | ipvs: do not propagate one_packet flag to hashed conns | 1 | ja@ssi.bg | finished in 5h10m0s |
| 2026-06-30 19:09 UTC | netfilter: nft_ct: support expectation creation for natted flows | 3 | fw@strlen.de | finished in 5h0m0s |
| 2026-06-30 15:55 UTC | netfilter: nft_set_rbtree: reject interval-end get for open intervals | 1 | mlbnkm1@gmail.com | finished in 4h42m0s |
| 2026-06-30 06:57 UTC | netfilter: nf_flow_table_path: L2 bridge offload | 2 | pawlik.dan@gmail.com | finished in 4h32m0s |
| 2026-06-30 06:03 UTC | netfilter: nft_ct: support expectation creation for natted flows | 2 | fw@strlen.de | finished in 4h59m0s |
| 2026-06-30 04:52 UTC | netfilter: updates for net | 1 | fw@strlen.de | finished in 4h29m0s |
| 2026-06-29 14:39 UTC | flowtable fixes for ipip tunnels | 1 | pablo@netfilter.org | finished in 4h29m0s |
| 2026-06-29 13:46 UTC | netfilter: nft_ct: support expectation creation for natted flows | 1 | fw@strlen.de | finished in 4h46m0s |
| 2026-06-29 12:58 UTC | netfilter: conntrack: remove obsolete module parameters | 2 | fw@strlen.de | finished in 5h0m0s |
| 2026-06-29 12:32 UTC | netfilter: nf_flow_table_path: L2 bridge offload | 1 | pawlik.dan@gmail.com | finished in 4h44m0s |
| 2026-06-29 10:53 UTC | netfilter: nft_fib: reject fib expression on the netdev egress hook | 2 | theodorlarionov@gmail.com | finished in 4h11m0s |
| 2026-06-29 09:33 UTC | netfilter: nf_nat_masquerade: recalculate TCP TS offset when port is randomized | 1 | xietangxin@h-partners.com | finished in 4h17m0s |
| 2026-06-28 08:05 UTC | netfilter: xt_u32: reject invalid shift counts | 1 | n05ec@lzu.edu.cn | finished in 4h33m0s |
| 2026-06-27 16:05 UTC | ipvs: preserve conn hash flags when late-binding dest | 1 | n05ec@lzu.edu.cn | finished in 4h5m0s |
| 2026-06-26 22:25 UTC | netfilter: x_tables: replace strlcat() with snprintf() | 1 | icb@fastmail.org | skipped |
| 2026-06-26 12:31 UTC | netfilter: conntrack: remove obsolete module parameters | 1 | fw@strlen.de |
finished
in 1h26m0s
[1 findings] |
| 2026-06-26 11:40 UTC | netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master | 1 | pablo@netfilter.org | finished in 4h12m0s |
| 2026-06-26 11:24 UTC | netfilter: nf_conntrack_sip: validate skb_dst() before accessing it | 1 | pablo@netfilter.org | finished in 2h40m0s |
| 2026-06-26 06:49 UTC | netfilter: nf_conntrack_sip: guard against missing skb dst | 1 | n05ec@lzu.edu.cn | finished in 2h9m0s |
| 2026-06-25 17:25 UTC | netfilter: replace u_int*_t with kernel int types (batch 2) | 2 | carlos@carlosgrillet.me | skipped |
| 2026-06-25 13:31 UTC | netfilter: remove redundant null check before kvfree() | 1 | subasris1210@gmail.com | skipped |
| 2026-06-25 12:28 UTC | netfilter: nft_fib: reject fib expression on the netdev egress hook | 1 | theodorlarionov@gmail.com | finished in 4h14m0s |
| 2026-06-25 01:00 UTC | netfilter: ipset: fix race between dump and ip_set_list resize | 1 | xmei5@asu.edu | finished in 4h33m0s |
| 2026-06-25 00:13 UTC | netfilter: nf_conntrack_expect: zero at allocation time | 1 | fw@strlen.de | finished in 4h20m0s |
| 2026-06-24 18:40 UTC | netfilter: replace u_int*_t with kernel int types (batch 2) | 1 | carlos@carlosgrillet.me | skipped |
| 2026-06-24 16:12 UTC | tests: shell: add tunnel vxlan test | 1 | fw@strlen.de | skipped |
| 2026-06-23 22:15 UTC | Netfilter fixes for net | 1 | pablo@netfilter.org | finished in 4h1m0s |
| 2026-06-23 05:30 UTC | netfilter: nft_ct: expectation timeouts are passed in milliseconds | 1 | fw@strlen.de | finished in 4h13m0s |
| 2026-06-23 04:37 UTC | libmnl: add MNL_TYPE_UARR for devlink u64 array attributes | 1 | rkannoth@marvell.com | skipped |
| 2026-06-22 19:49 UTC | netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration | 1 | pablo@netfilter.org | skipped |
| 2026-06-22 19:36 UTC | netfilter: nf_conntrack_expect: store master_tuple in expectation | 1 | pablo@netfilter.org | skipped |
| 2026-06-22 19:36 UTC | netfilter: nf_conntrack_expect: run expectation eviction with no helper | 1 | pablo@netfilter.org | finished in 4h31m0s |
| 2026-06-22 12:05 UTC | bpf: add icmp_send kfunc | 8 | mahe.tardy@gmail.com | finished in 4h6m0s |
| 2026-06-22 11:57 UTC | netfilter: ctnetlink: do not allow to reset helper on existing conntrack | 1 | pablo@netfilter.org | finished in 4h4m0s |
| 2026-06-21 18:49 UTC | netfilter: TCPMSS: handle packets with unaligned MSS option | 3 | kacper.kokot.44@gmail.com | finished in 4h2m0s |
| 2026-06-20 08:37 UTC | minor spelling and grammar fixes in doc | 1 | pritt1999@gmail.com | skipped |
| 2026-06-19 11:54 UTC | Netfilter fixes for net | 1 | pablo@netfilter.org | finished in 4h19m0s |