| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-07-29 00:16 UTC | netfilter: nf_conntrack: move expectation hlist_head on ct extension realloc | 1 | pablo@netfilter.org | - |
| 2026-07-28 21:54 UTC | seg6: check lwtunnel state after nf hooks in seg6local | 2 | xmei5@asu.edu | - |
| 2026-07-28 20:25 UTC | ipvs: csum validations, part 2 | 2 | ja@ssi.bg | - |
| 2026-07-28 08:40 UTC | netfilter: nf_tables: call skb_valid_dst() before skb_dst() | 1 | pablo@netfilter.org | in progress |
| 2026-07-28 07:35 UTC | netfilter: conntrack: sctp: verify vtag before state changes | 1 | zhaoyz24@mails.tsinghua.edu.cn | in progress |
| 2026-07-28 04:21 UTC | ipvs: stop estimator after disabled calc phase | 2 | zhilinz@nebusec.ai | finished in 4h41m0s |
| 2026-07-27 19:41 UTC | netfilter: conncount: normalize tuple and zone on successful ct lookup | 1 | fmancera@suse.de | finished in 4h53m0s |
| 2026-07-27 18:50 UTC | ipvs: csum validations, part 2 | 1 | ja@ssi.bg | finished in 5h3m0s |
| 2026-07-27 18:09 UTC | netfilter: ebtables: avoid unbounded counter allocations | 1 | enjou1224z@gmail.com | finished in 6h25m0s |
| 2026-07-27 17:58 UTC | netfilter: h323: fix helper NAT mangling | 1 | enjou1224z@gmail.com | finished in 3h30m0s |
| 2026-07-27 16:58 UTC | ipvs: guard estimator enqueue until limits are set | 1 | enjou1224z@gmail.com | finished in 5h52m0s |
| 2026-07-27 14:21 UTC | mergesort: use lhs expression when sorting concatenation | 1 | pablo@netfilter.org | skipped |
| 2026-07-27 08:24 UTC | datatype: accept a numeric cgroupsv2 id on input | 1 | avinash.duduskar@gmail.com | skipped |
| 2026-07-26 12:03 UTC | net: flow_offload: serialize driver callback lists | 2 | bestswngs@gmail.com | finished in 5h21m0s |
| 2026-07-24 11:01 UTC | netfilter: ip6tables: set hotdrop for malformed extension header matches | 3 | running910@gmail.com | finished in 5h39m0s |
| 2026-07-24 10:49 UTC | Netfilter/IPVS updates for net-next | 1 | pablo@netfilter.org | finished in 4h54m0s |
| 2026-07-24 07:25 UTC | net: ip6_tunnel: use tunnel parameters for fill_forward_path route lookup | 3 | lorenzo@kernel.org | finished in 5h22m0s |
| 2026-07-23 17:49 UTC | flowtable: pass dst_entry from ipip tunnel | 1 | pablo@netfilter.org | finished in 4h56m0s |
| 2026-07-22 22:38 UTC | netfilter: ipset: fix refcount race between list:set GC and swap | 1 | xmei5@asu.edu | finished in 5h45m0s |
| 2026-07-22 21:14 UTC | Netfilter/IPVS fixes for net | 1 | pablo@netfilter.org | finished in 5h22m0s |
| 2026-07-22 12:57 UTC | netfilter: nf_conntrack_h323: fix get_bitmap() overread | 1 | kudo3228@gmail.com | finished in 3h0m0s |
| 2026-07-22 10:25 UTC | ipvs: clear the nfct flag under lock | 1 | ja@ssi.bg | finished in 5h11m0s |
| 2026-07-22 10:15 UTC | ipvs: csum validations and data offsets | 3 | ja@ssi.bg | finished in 5h23m0s |
| 2026-07-22 07:12 UTC | net: ip6_tunnel: use tunnel parameters for fill_forward_path route lookup | 2 | lorenzo@kernel.org | finished in 4h33m0s |
| 2026-07-21 20:20 UTC | netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH | 1 | pablo@netfilter.org | finished in 5h2m0s |
| 2026-07-21 07:46 UTC | netfilter: xt_hashlimit: fix uninitialized rateinfo.burst read on shared table | 1 | talha.anything.info@gmail.com | finished in 6h8m0s |
| 2026-07-20 20:44 UTC | seg6: fix NULL deref in input_action_end_dx{4,6}_finish() after nf hook | 1 | xmei5@asu.edu | finished in 5h39m0s |
| 2026-07-20 20:11 UTC | ipvs: csum validations and data offsets | 2 | ja@ssi.bg | finished in 5h2m0s |
| 2026-07-19 22:15 UTC | netfilter: nft_payload: fix mask build for partial field offload | 1 | xmei5@asu.edu | finished in 5h1m0s |
| 2026-07-19 17:50 UTC | netdevsim: tc: serialize access to nsim_block_cb_list | 1 | bestswngs@gmail.com | finished in 4h55m0s |
| 2026-07-17 18:59 UTC | nft: fix out-of-bounds read listing an old-revision match | 1 | omkhar@linkedin.com | skipped |
| 2026-07-17 18:56 UTC | nft: bridge: fix among buffer overflow when set has no size | 1 | omkhar@linkedin.com | skipped |
| 2026-07-16 14:39 UTC | netfilter: nf_tables: make nft_object rhltable per netns | 1 | pablo@netfilter.org | finished in 4h35m0s |
| 2026-07-16 14:07 UTC | ipvs: use type-safe allocation helpers in ip_vs_rht_alloc | 1 | subasris1210@gmail.com | skipped |
| 2026-07-15 14:48 UTC | netfilter: conntrack: prevent helper extension relocation | 1 | iostreampy@proton.me | finished in 4h53m0s |
| 2026-07-14 03:21 UTC | netfilter: ip6tables: set hotdrop for malformed extension header matches | 2 | running910@gmail.com | finished in 5h27m0s |
| 2026-07-13 18:36 UTC | netfilter: nft_fib: bail out if input device is missing | 1 | xmei5@asu.edu | finished in 5h11m0s |
| 2026-07-13 16:33 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 3 | bestswngs@gmail.com | finished in 5h12m0s |
| 2026-07-13 16:15 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 2 | bestswngs@gmail.com | finished in 55m0s |
| 2026-07-13 16:06 UTC | netfilter: conntrack_helper: pass master conntrack to helper functions | 1 | pablo@netfilter.org | finished in 4h42m0s |
| 2026-07-13 12:53 UTC | selftests: netfilter: nft_flowtable.sh: fix offload counter verification for tunnel tests | 2 | lorenzo@kernel.org | skipped |
| 2026-07-13 12:46 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 6 | lorenzo@kernel.org | skipped |
| 2026-07-13 11:07 UTC | net: sysctl: Const Qualify sysctl ctl_table arrays | 3 | joel.granados@kernel.org | finished in 5h22m0s |
| 2026-07-13 09:59 UTC | netfilter: ipset: do not update comments from kernel-side hash adds | 1 | david.lee@trailofbits.com | finished in 5h33m0s |
| 2026-07-13 09:48 UTC | ipvs: fix destination overload state updates | 3 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h28m0s |
| 2026-07-12 23:42 UTC | netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() | 1 | xmei5@asu.edu | finished in 3h29m0s |
| 2026-07-12 23:06 UTC | netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair() | 1 | pablo@netfilter.org | finished in 4h37m0s |
| 2026-07-12 07:32 UTC | netfilter: nf_nat: stop reusing DEAD RTP expectations | 2 | iostreampy@proton.me | finished in 5h12m0s |
| 2026-07-11 14:21 UTC | netfilter: nf_nat: do not reuse an unexpected expectation on RTCP clash | 1 | iostreampy@proton.me | finished in 2h55m0s |
| 2026-07-11 13:55 UTC | selftests: netfilter: nft_flowtable.sh: check offload counters for IP6IP6 tunnel test | 1 | lorenzo@kernel.org | skipped |
| 2026-07-10 23:07 UTC | gtp: check skb_pull_data() return in gtp1u_send_echo_resp() | 1 | xmei5@asu.edu | finished in 4h58m0s |
| 2026-07-10 15:14 UTC | Address Sashiko review of NAT hook dump code | 3 | phil@nwl.cc | finished in 4h51m0s |
| 2026-07-10 14:37 UTC | netfilter: updates for net | 1 | fw@strlen.de | finished in 5h7m0s |
| 2026-07-10 13:27 UTC | netfilter: nf_nat: recalculate TCP TS offset after SNAT port rewrite | 3 | xietangxin@h-partners.com | finished in 4h51m0s |
| 2026-07-10 07:36 UTC | netfilter: flowtable: tear down flow entries with stale dst from GC | 1 | pablo@netfilter.org | finished in 5h6m0s |
| 2026-07-09 20:23 UTC | ipvs: fix the checksum validations | 1 | ja@ssi.bg | finished in 5h14m0s |
| 2026-07-09 19:46 UTC | Address Sashiko review of NAT hook dump code | 2 | phil@nwl.cc | finished in 3h4m0s |
| 2026-07-09 13:12 UTC | netfilter: nf_nat: recalculate TCP TS offset when snat change sport | 2 | xietangxin@h-partners.com | finished in 4h57m0s |
| 2026-07-09 11:40 UTC | netfilter: flowtable: use correct direction to set up tunnel route | 1 | pablo@netfilter.org | finished in 5h7m0s |
| 2026-07-09 08:52 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 5 | lorenzo@kernel.org | finished in 5h8m0s |
| 2026-07-09 06:30 UTC | netfilter: ip6tables: set hotdrop for malformed extension header matches | 1 | running910@gmail.com | finished in 5h17m0s |
| 2026-07-08 23:35 UTC | parser_json: initialize geneve options list for empty tunnel array | 1 | omkhar@linkedin.com | skipped |
| 2026-07-08 20:54 UTC | netfilter: flowtable: tear down HW offloaded flows on FIB route changes | 1 | anzaki@gmail.com |
finished
in 6h18m0s
[1 findings] |
| 2026-07-08 19:02 UTC | Revert "gtp: annotate PDP lookups under RTNL" | 1 | horms@kernel.org | skipped |
| 2026-07-08 18:11 UTC | netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() | 2 | xmei5@asu.edu | finished in 2h42m0s |
| 2026-07-08 18:03 UTC | ipvs: fix more places with wrong ipv6 transport offsets | 1 | ja@ssi.bg | finished in 5h1m0s |
| 2026-07-08 16:19 UTC | Address Sashiko review of NAT hook dump code | 1 | phil@nwl.cc |
finished
in 2h11m0s
[1 findings] |
| 2026-07-08 14:02 UTC | netfilter: updates for net | 1 | fw@strlen.de | finished in 4h47m0s |
| 2026-07-08 12:48 UTC | net: ip6_tunnel: use tunnel parameters for fill_forward_path route lookup | 1 | lorenzo@kernel.org | finished in 5h22m0s |
| 2026-07-08 11:25 UTC | net: ipip: use tunnel parameters for fill_forward_path route lookup | 1 | lorenzo@kernel.org | finished in 5h2m0s |
| 2026-07-08 06:04 UTC | ipvs: make destination flags atomic | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h24m0s |
| 2026-07-08 05:27 UTC | netfilter: nf_conncount: fix zone comparison in tuple dedup | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h7m0s |
| 2026-07-08 04:22 UTC | gtp: parse extension headers before reading inner protocol | 3 | running910@gmail.com | finished in 5h20m0s |
| 2026-07-07 19:51 UTC | netfilter: replace u_int*_t with kernel int types (batch 3) | 1 | carlos@carlosgrillet.me | skipped |
| 2026-07-07 18:25 UTC | ipvs: ensure inner headers in ICMP errors are in headroom | 2 | ja@ssi.bg | finished in 5h58m0s |
| 2026-07-07 11:00 UTC | netfilter: ecache: fix inverted time_after() check | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h58m0s |
| 2026-07-07 09:10 UTC | netfilter: Add bridge-fastpath | 12 | ericwouds@gmail.com | finished in 4h54m0s |
| 2026-07-07 08:57 UTC | ipvs: make destination flags atomic | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h58m0s |
| 2026-07-06 23:28 UTC | netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() | 1 | xmei5@asu.edu | finished in 2h51m0s |
| 2026-07-06 15:10 UTC | ipvs: ensure inner headers in ICMP errors are in headroom | 1 | ja@ssi.bg | finished in 6h6m0s |
| 2026-07-06 11:48 UTC | netfilter: nf_conncount: fix zone comparison in tuple dedup | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h13m0s |
| 2026-07-06 10:16 UTC | ipvs: use parsed transport offsets in state handlers | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h28m0s |
| 2026-07-05 23:36 UTC | netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag | 1 | xmei5@asu.edu | finished in 4h55m0s |
| 2026-07-05 21:58 UTC | netfilter: ebtables: terminate table name before find_table_lock() | 1 | xmei5@asu.edu | finished in 4h26m0s |
| 2026-07-05 12:56 UTC | ipvs: skip IPv6 extension headers in TCP state lookup | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h25m0s |
| 2026-07-05 12:30 UTC | ipvs: skip IPv6 extension headers in SCTP state lookup | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h6m0s |
| 2026-07-04 06:22 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 1 | bestswngs@gmail.com | finished in 4h51m0s |
| 2026-07-03 16:22 UTC | netfilter: nft_lookup: fix catchall element handling with inverted lookups | 1 | ty@000ty.net | finished in 4h0m0s |
| 2026-07-03 14:10 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 4 | lorenzo@kernel.org | finished in 4h55m0s |
| 2026-07-03 12:57 UTC | netfilter: updates for net | 1 | fw@strlen.de | finished in 4h29m0s |
| 2026-07-03 09:37 UTC | gtp: parse extension headers before reading inner protocol | 2 | running910@gmail.com | finished in 4h36m0s |
| 2026-07-03 08:42 UTC | gtp: parse extension headers before reading inner protocol | 1 | running910@gmail.com | finished in 4h45m0s |
| 2026-07-03 07:32 UTC | netfilter: xt_time: reject pre-epoch calendar matching | 1 | enjou1224z@gmail.com | finished in 4h25m0s |
| 2026-07-03 05:04 UTC | netfilter: xt_connmark: reject invalid shift parameters | 1 | enjou1224z@gmail.com | finished in 4h51m0s |
| 2026-07-02 13:46 UTC | netfilter: ipset: gc, backlog and cidr patches | 1 | kadlec@netfilter.org | finished in 5h18m0s |
| 2026-07-02 12:36 UTC | segtree: fix get element command with open intervals | 1 | pablo@netfilter.org | skipped |
| 2026-07-02 12:33 UTC | netfilter: nft_set_rbtree: get command skips end element with open interval | 1 | pablo@netfilter.org | finished in 5h6m0s |
| 2026-07-02 11:28 UTC | ipvs: reset full ip_vs_seq structs in ip_vs_conn_new | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 2h39m0s |
| 2026-07-02 10:49 UTC | netfilter: updates for net-next | 1 | fw@strlen.de | finished in 2h38m0s |
| 2026-07-02 10:10 UTC | ipvs: Move defense_work and est_reload_work to system_dfl_long_wq | 2 | iluceno@suse.de | finished in 1h34m0s |