| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-11-01 08:17 UTC | lib/ts_fsm: preserve patterns across tc dump and restore | 2 | zhiqizhangg@gmail.com | - |
| 2026-11-01 06:15 UTC | ipvs: avoid wrapping persistent service timeouts | 2 | x-professor@outlook.com | - |
| 2026-11-01 01:45 UTC | netfilter: nf_conntrack_reasm: restore IPv6 nhoff after reassembly | 1 | ryosuke@ikotaslabs.com | - |
| 2026-10-31 15:54 UTC | netfilter: nft_set_rbtree: do not pair an expired start with another interval's end | 1 | devnull@kernel.org | finished in 4h12m0s |
| 2026-10-31 11:44 UTC | netfilter: cthelper: report absent filtered deletes | 1 | pocj8ur4in@gmail.com | finished in 4h29m0s |
| 2026-10-31 07:15 UTC | ipvs: avoid wrapping persistent service timeouts | 1 | x-professor@outlook.com | finished in 3h49m0s |
| 2026-10-31 03:26 UTC | seg6: validate state in netfilter continuations | 4 | weir@nebusec.ai | finished in 4h12m0s |
| 2026-10-30 13:57 UTC | netfilter: nfnetlink_queue: keep socket ownership when expanding skb | 1 | fmancera@suse.de | finished in 4h3m0s |
| 2026-10-30 04:21 UTC | netfilter: br_netfilter: reject unsafe neighbour devices for DNAT | 1 | kylebot@openai.com | finished in 3h52m0s |
| 2026-10-29 22:01 UTC | netfilter: nft_flow_offload: do not offload multicast | 2 | koralilgun@gmail.com | finished in 3h51m0s |
| 2026-10-29 17:32 UTC | netfilter: lwtunnel: expose read-only sysctl nf_hooks_lwtunnel for non init-netns | 1 | pablo@netfilter.org | finished in 4h43m0s |
| 2026-10-29 17:19 UTC | netfilter: flowtable: purge entries immediately when destroying the flowtable | 1 | pablo@netfilter.org |
finished
in 4h10m0s
[2 findings] |
| 2026-10-29 13:35 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 1 | lorenzo.bianconi@oss.qualcomm.com | finished in 3h57m0s |
| 2026-10-29 13:18 UTC | net: airoha: update stats on flow deletion | 1 | lorenzo.bianconi@oss.qualcomm.com | skipped |
| 2026-10-29 13:17 UTC | netfilter: xt_time: fix monthday computation for dates past 2039 | 1 | fmancera@suse.de | finished in 4h10m0s |
| 2026-10-29 11:14 UTC | netfilter: flowtable: retrieve stats on flow deletion | 1 | pablo@netfilter.org | finished in 3h59m0s |
| 2026-10-28 21:44 UTC | netfilter: xt_recent: do not call remove_proc_entry() under recent_lock | 1 | cenzhang@linux.microsoft.com | finished in 4h7m0s |
| 2026-10-28 20:59 UTC | netfilter: nft_flow_offload: do not offload multicast | 1 | koralilgun@gmail.com | finished in 3h51m0s |
| 2026-10-28 19:10 UTC | net/ipv6: don't route packets with unknown source address | 3 | ihuguet@riseup.net | finished in 4h16m0s |
| 2026-10-28 11:07 UTC | netfilter: nf_tables: fix memleak when rule deletion fails with hardware offload | 1 | pablo@netfilter.org | finished in 4h10m0s |
| 2026-10-28 06:22 UTC | netfilter: nf_tables: fix flow rule leak in nft_delrule() error path | 1 | hdthky0@gmail.com | finished in 4h37m0s |
| 2026-10-28 00:19 UTC | netfilter: flowtable: perform unbind callback on hook release | 1 | pablo@netfilter.org | finished in 4h5m0s |
| 2026-10-27 13:06 UTC | gtp: Require 'CAP_NET_ADMIN' when joining the gtp multicast group | 3 | anilkaushikwireless@gmail.com | finished in 4h9m0s |
| 2026-10-27 05:05 UTC | ipset: ignore port ranges for portless protocols | 2 | zhilinz@nebusec.ai | finished in 4h37m0s |
| 2026-10-26 15:59 UTC | ppp: linearize and segment bridged packets when required | 2 | edumazet@kernel.org | finished in 3h57m0s |
| 2026-10-26 12:53 UTC | netfilter: xt_policy: add NULL check for skb_dst() in output policy match | 1 | fangxy@xiaopeng.com | finished in 4h17m0s |
| 2026-10-26 12:07 UTC | netfilter: x_tables: check target name before accessing verdict | 1 | fmancera@suse.de | finished in 4h10m0s |
| 2026-10-26 10:29 UTC | netfilter: ipset: fix double free on kernel-side delete during resize | 3 | fuchen.dust@gmail.com | finished in 4h47m0s |
| 2026-10-26 03:56 UTC | netfilter: flowtable: remove hardware flows before unbinding | 1 | plcharriere@gmail.com | finished in 3h51m0s |
| 2026-10-24 22:09 UTC | netfilter: nft_limit: reject configs whose per-packet cost can overflow | 3 | saifmassaoudi18@gmail.com | finished in 3h48m0s |
| 2026-10-24 22:03 UTC | netfilter: nft_set_pipapo: skip transaction elements during GC | 1 | joasantonio108@gmail.com | finished in 4h0m0s |
| 2026-10-24 17:03 UTC | netfilter: nf_conntrack_sip: fix OOB read in ct_sip_parse_transport() | 2 | joasantonio108@gmail.com | finished in 4h12m0s |
| 2026-10-24 13:55 UTC | include: linux: drop bundled copy of types.h | 1 | yegorslists@googlemail.com | skipped |
| 2026-10-24 07:23 UTC | seg6: validate state in netfilter continuations | 3 | weir@nebusec.ai | finished in 4h11m0s |
| 2026-10-23 19:09 UTC | netfilter: nft_limit: reject configs whose per-packet cost can overflow | 2 | saifmassaoudi18@gmail.com | skipped |
| 2026-10-23 08:44 UTC | gtp: hold RCU in gtp_genl_send_echo_req() | 1 | pabeni@redhat.com | finished in 4h1m0s |
| 2026-10-23 07:37 UTC | gtp: Require 'CAP_NET_ADMIN' when joining the gtp multicast group | 2 | anilkaushikwireless@gmail.com | finished in 4h0m0s |
| 2026-10-23 05:26 UTC | netfilter: ebtables: validate compat nentries | 1 | zhilinz@nebusec.ai | finished in 4h7m0s |
| 2026-10-22 20:45 UTC | allow map lookups as operands of bitwise binops | 1 | jochen@seeber.me | skipped |
| 2026-10-22 17:48 UTC | netfilter: nf_conntrack_h323: fix out-of-bounds read in get_bitmap() | 1 | luuducanh05051995@gmail.com | finished in 1h52m0s |
| 2026-10-22 17:22 UTC | netfilter: nf_conntrack_sip: fix out-of-bounds read in ct_sip_parse_transport() | 1 | luuducanh05051995@gmail.com | finished in 4h5m0s |
| 2026-10-22 12:57 UTC | more virtio-net csum hardening | 5 | mst@redhat.com | finished in 4h28m0s |
| 2026-10-22 11:10 UTC | ppp: linearize and segment bridged packets when required | 1 | edumazet@kernel.org | finished in 4h21m0s |
| 2026-10-22 10:59 UTC | netfilter: nf_nat: do not link a conntrack twice into nat_bysource | 1 | avimalin@gmail.com | finished in 4h13m0s |
| 2026-10-21 19:35 UTC | netfilter: nf_queue: follow-ups to the hook drop flush change | 1 | aojea@google.com | finished in 3h53m0s |
| 2026-10-21 19:09 UTC | ipset: ignore port ranges for portless protocols | 1 | zhilinz@nebusec.ai | finished in 4h7m0s |
| 2026-10-21 18:03 UTC | xsk, ipv6: validate user-supplied checksum offsets | 1 | nick.simo@gmail.com | finished in 4h20m0s |
| 2026-10-21 17:50 UTC | netfilter: flowtable: fetch hardware counters before removing a flow | 1 | dreyksmail@gmail.com | finished in 4h56m0s |
| 2026-10-21 09:07 UTC | netfilter: nf_reject_ipv6: fix locally generated packet to local address | 1 | pablo@netfilter.org | finished in 3h59m0s |
| 2026-10-21 07:21 UTC | netfilter: nfnetlink_queue: use the verdict portid for NFQA_EXP events | 1 | theodorlarionov@gmail.com | finished in 4h44m0s |
| 2026-10-21 06:57 UTC | gtp: Require 'CAP_NET_ADMIN' when joining the gtp multicast group | 1 | anilkaushikwireless@gmail.com | finished in 4h45m0s |
| 2026-10-20 22:29 UTC | netfilter: flowtable: use skb_pull_rcsum() to pull IPIP tunnel header | 1 | pablo@netfilter.org | finished in 52m0s |
| 2026-10-20 13:29 UTC | netfilter: bridge: use DEBUG_NET_WARN_ON_ONCE in nf_ct_bridge_refrag() | 2 | laveeshb@laveeshbansal.com | finished in 1h3m0s |
| 2026-10-20 10:35 UTC | netfilter: flowtable: extend ct timeout of offloaded GRE flows | 1 | mike.michalo@gmail.com | finished in 4h15m0s |
| 2026-10-20 03:37 UTC | netfilter: nft_set_rbtree: check catchall_sync return before queue_done | 1 | hdthky0@gmail.com | finished in 4h34m0s |
| 2026-10-20 00:54 UTC | netfilter: bridge: refragment packets with a vlan tag moved by the bridge | 1 | laveeshb@laveeshbansal.com | finished in 4h12m0s |
| 2026-10-19 15:02 UTC | Netfilter/IPVS fixes for net | 1 | pablo@netfilter.org | finished in 4h41m0s |
| 2026-10-19 12:03 UTC | more virtio-net csum hardening | 3 | mst@redhat.com | finished in 4h41m0s |
| 2026-10-19 10:16 UTC | netfilter: flowtable: fix pmtu discovery in nf_flow_tunnel_ip6ip6_push() | 1 | lorenzo.bianconi@oss.qualcomm.com | finished in 3h51m0s |
| 2026-10-19 09:54 UTC | netfilter: flowtable: reset transport header after nf_flow_encap_pop() | 1 | lorenzo.bianconi@oss.qualcomm.com | finished in 3h54m0s |
| 2026-10-19 09:01 UTC | netfilter: flowtable: consolidate unsupported hardware offload check | 1 | pablo@netfilter.org | finished in 4h58m0s |
| 2026-10-19 07:56 UTC | netfilter: nf_conntrack_netlink: fix inverted IPv6 tuple filter | 1 | liuc63@xiaopeng.com | finished in 4h4m0s |
| 2026-10-18 11:29 UTC | net/sched: cls_api: unlink indr cb on a failed bind | 2 | q.h.hack.winter@gmail.com | finished in 4h30m0s |
| 2026-10-18 06:27 UTC | seg6: validate state in netfilter continuations | 2 | weir@nebusec.ai | finished in 3h59m0s |
| 2026-10-18 05:23 UTC | netfilter: ipset: don't mask the element in place in mtype_test_cidrs() | 2 | ty@000ty.net | finished in 3h49m0s |
| 2026-10-18 04:03 UTC | conntrack: apply the receive buffer size to the event socket | 1 | zypulsecore@gmail.com | skipped |
| 2026-10-18 03:52 UTC | netfilter: ipset: restore element before rescanning cidrs on seqcount retry | 1 | ty@000ty.net | finished in 3h55m0s |
| 2026-10-18 00:56 UTC | Netfilter updates for net-next | 1 | pablo@netfilter.org | finished in 4h2m0s |
| 2026-10-18 00:06 UTC | netfilter: nfnetlink_queue: add helper function to retrieve hook entries | 1 | pablo@netfilter.org | finished in 4h0m0s |
| 2026-10-17 23:58 UTC | netfilter: flowtable: tear down bridged flows on layer 2 roaming | 8 | julius@bairaktaris.de | finished in 3h50m0s |
| 2026-10-16 16:14 UTC | netfilter: nf_dup: preserve guard across NFQUEUE reinjection | 9 | zihanx@nebusec.ai | finished in 4h7m0s |
| 2026-10-16 14:37 UTC | selinux: don't label bridged packets in selinux_ip_forward() | 1 | joasantonio108@gmail.com | finished in 2h22m0s |
| 2026-10-16 09:32 UTC | gtp: ynl spec for the GTP netlink family, two fixes, and a selftest | 7 | anilkaushikwireless@gmail.com | finished in 4h23m0s |
| 2026-10-16 08:52 UTC | netfilter: flowtable: do not hw offload flows in teardown state | 1 | pablo@netfilter.org |
finished
in 4h3m0s
[1 findings] |
| 2026-10-15 22:57 UTC | netfilter: nft_limit: reject configurations that cause integer overflow | 1 | saifmassaoudi18@gmail.com | finished in 4h13m0s |
| 2026-10-15 17:53 UTC | netfilter: flowtable: consolidate unsupported hardware offload check | 1 | pablo@netfilter.org | finished in 3h53m0s |
| 2026-10-15 17:37 UTC | netfilter: flowtable: move hardware offload refresh to GC worker | 1 | pablo@netfilter.org | finished in 4h12m0s |
| 2026-10-15 12:41 UTC | more virtio-net csum hardening | 2 | mst@redhat.com | finished in 4h34m0s |
| 2026-10-15 08:56 UTC | netfilter: flowtable: use PPPoE GSO handler | 1 | qingfang.deng@linux.dev | finished in 4h10m0s |
| 2026-10-15 07:43 UTC | netfilter: bound asynchronous packet duplication | 8 | zihanx@nebusec.ai | finished in 4h8m0s |
| 2026-10-14 23:56 UTC | netfilter: flowtable: tear down bridged flows on layer 2 roaming | 7 | julius@bairaktaris.de | finished in 4h3m0s |
| 2026-10-14 21:02 UTC | netfilter: flowtable: teardown flow reaching bridge port on fdb updates | 1 | pablo@netfilter.org | finished in 4h27m0s |
| 2026-10-13 23:43 UTC | netfilter: pin file with get_file_rcu() before reading f_cred | 1 | tristmd@gmail.com |
finished
in 5h1m0s
[7 findings] |
| 2026-10-13 20:57 UTC | neighbour: Misc follow-ups on per-netns neigh_table series. | 2 | kuniyu@google.com | finished in 3h59m0s |
| 2026-10-13 16:29 UTC | net/sched: cls_api: unlink indr cb on a failed bind | 1 | q.h.hack.winter@gmail.com | finished in 4h10m0s |
| 2026-10-13 10:58 UTC | more virtio-net csum hardening | 1 | mst@redhat.com | finished in 4h25m0s |
| 2026-10-13 03:09 UTC | gtp: ynl spec for the GTP netlink family, a reply-command fix, and a selftest | 6 | anilkaushikwireless@gmail.com | finished in 4h3m0s |
| 2026-10-12 19:44 UTC | neighbour: Misc follow-ups on per-netns neigh_table series. | 1 | kuniyu@google.com | finished in 4h13m0s |
| 2026-10-12 16:33 UTC | netfilter: ipset: fix double free on kernel-side delete during resize | 1 | fuchen.dust@gmail.com | finished in 4h40m0s |
| 2026-10-12 09:08 UTC | netfilter: nf_conntrack_h323: fix NULL deref in decode_seqof() | 1 | zhugl3@xiaopeng.com | finished in 2h2m0s |
| 2026-10-12 02:47 UTC | gtp: ynl spec for the GTP netlink family, a reply-command fix, and a selftest | 5 | anilkaushikwireless@gmail.com | finished in 4h28m0s |
| 2026-10-11 21:59 UTC | Netfilter/IPVS updates for net-next | 1 | pablo@netfilter.org | finished in 4h25m0s |
| 2026-10-11 11:28 UTC | netfilter: nf_dup: preserve duplication guard across NFQUEUE | 7 | zihanx@nebusec.ai | finished in 4h0m0s |
| 2026-10-10 10:57 UTC | gtp: ynl spec for the GTP netlink family, a reply-command fix, and a selftest | 4 | anilkaushikwireless@gmail.com | finished in 3h59m0s |
| 2026-10-09 16:26 UTC | netfilter: synproxy: check TCP header before verifying checksum | 2 | raghunathpalla.0209@gmail.com | finished in 4h36m0s |
| 2026-10-09 15:02 UTC | netfilter: bridge: refragment reassembled packets passed up | 1 | g.goller@proxmox.com | finished in 4h10m0s |
| 2026-10-09 12:41 UTC | netfilter: nf_conntrack_h323: fix NULL pointer deref in decode_seqof() | 1 | bsdhenrymartin@gmail.com | finished in 4h39m0s |
| 2026-10-09 06:06 UTC | gtp: ynl spec for the GTP netlink family, a reply-command fix, and a selftest | 3 | anilkaushikwireless@gmail.com | finished in 4h17m0s |
| 2026-10-08 18:38 UTC | netfilter: xt_dccp: handle reserved options as single-byte | 1 | tjdqudcks0424@naver.com | finished in 4h20m0s |
| 2026-10-08 18:10 UTC | gtp: ynl spec for the GTP netlink family, a reply-command fix, and a selftest | 2 | anilkaushikwireless@gmail.com | finished in 4h18m0s |