| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-07-31 16:09 UTC | bpf: Fix netns reference imbalance in conntrack kfuncs | 3 | nicoyip.dev@gmail.com | - |
| 2026-07-31 14:53 UTC | netfilter: conntrack: sctp: validate vtag before state changes | 1 | zhaoyz24@mails.tsinghua.edu.cn | - |
| 2026-07-31 14:27 UTC | ipvs: fix destination overload state updates | 4 | zhaoyz24@mails.tsinghua.edu.cn | - |
| 2026-07-31 14:08 UTC | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 1 | david.lee@trailofbits.com | - |
| 2026-07-31 14:08 UTC | netfilter: nf_conntrack: prevent helper extension relocation | 1 | david.lee@trailofbits.com | - |
| 2026-07-31 13:44 UTC | netfilter: nf_conntrack: defer invalid log until after unlock | 3 | zihanx@nebusec.ai | - |
| 2026-07-31 06:36 UTC | netfilter: bridge: release template ct on non-IP path | 1 | zhilinz@nebusec.ai | - |
| 2026-07-31 03:48 UTC | netfilter: validate L4 headers after userspace packet writes | 3 | zhilinz@nebusec.ai | - |
| 2026-07-30 13:55 UTC | netfilter: fix TCP conntrack invalid-log deadlock | 2 | zihanx@nebusec.ai | - |
| 2026-07-30 09:18 UTC | conntrack.8: Document --stats counters | 2 | phil@nwl.cc | - |
| 2026-07-30 08:29 UTC | bpf: Fix netns reference imbalance in conntrack kfuncs | 2 | nicoyip.dev@gmail.com | in progress |
| 2026-07-30 07:30 UTC | netfilter: validate L4 headers after userspace packet writes | 2 | zhilinz@nebusec.ai | in progress |
| 2026-07-29 17:37 UTC | datatype: accept a numeric cgroupsv2 id on input | 2 | avinash.duduskar@gmail.com | skipped |
| 2026-07-29 17:31 UTC | netfilter: ebt_nflog: pin the NFLOG backend | 1 | nicoyip.dev@gmail.com | finished in 2h16m0s |
| 2026-07-29 16:31 UTC | bpf: Fix netns reference imbalance in conntrack kfuncs | 1 | nicoyip.dev@gmail.com | finished in 2h9m0s |
| 2026-07-29 13:56 UTC | ipvs: stop estimator after disabled calc phase | 3 | zhilinz@nebusec.ai | finished in 4h34m0s |
| 2026-07-29 13:48 UTC | netfilter: fix TCP conntrack invalid-log deadlock | 1 | zihanx@nebusec.ai | skipped |
| 2026-07-28 10:10 UTC | gitignore: Only ignore top level *.m4 | 1 | phil@nwl.cc | skipped |
| 2026-07-28 07:35 UTC | netfilter: conntrack: sctp: verify vtag before state changes | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h49m0s |
| 2026-07-28 04:21 UTC | ipvs: stop estimator after disabled calc phase | 2 | zhilinz@nebusec.ai | finished in 4h41m0s |
| 2026-07-27 19:41 UTC | netfilter: conncount: normalize tuple and zone on successful ct lookup | 1 | fmancera@suse.de | finished in 4h53m0s |
| 2026-07-27 18:09 UTC | netfilter: ebtables: avoid unbounded counter allocations | 1 | enjou1224z@gmail.com | finished in 6h25m0s |
| 2026-07-27 17:58 UTC | netfilter: h323: fix helper NAT mangling | 1 | enjou1224z@gmail.com | finished in 3h30m0s |
| 2026-07-27 16:58 UTC | ipvs: guard estimator enqueue until limits are set | 1 | enjou1224z@gmail.com | finished in 5h52m0s |
| 2026-07-27 08:24 UTC | datatype: accept a numeric cgroupsv2 id on input | 1 | avinash.duduskar@gmail.com | skipped |
| 2026-07-24 11:01 UTC | netfilter: ip6tables: set hotdrop for malformed extension header matches | 3 | running910@gmail.com | finished in 5h39m0s |
| 2026-07-22 22:38 UTC | netfilter: ipset: fix refcount race between list:set GC and swap | 1 | xmei5@asu.edu | finished in 5h45m0s |
| 2026-07-22 12:57 UTC | netfilter: nf_conntrack_h323: fix get_bitmap() overread | 1 | kudo3228@gmail.com | finished in 3h0m0s |
| 2026-07-21 07:46 UTC | netfilter: xt_hashlimit: fix uninitialized rateinfo.burst read on shared table | 1 | talha.anything.info@gmail.com | finished in 6h8m0s |
| 2026-07-19 22:15 UTC | netfilter: nft_payload: fix mask build for partial field offload | 1 | xmei5@asu.edu | finished in 5h1m0s |
| 2026-07-17 18:59 UTC | nft: fix out-of-bounds read listing an old-revision match | 1 | omkhar@linkedin.com | skipped |
| 2026-07-17 18:56 UTC | nft: bridge: fix among buffer overflow when set has no size | 1 | omkhar@linkedin.com | skipped |
| 2026-07-16 14:07 UTC | ipvs: use type-safe allocation helpers in ip_vs_rht_alloc | 1 | subasris1210@gmail.com | skipped |
| 2026-07-15 23:02 UTC | tests: py: Fix --keep test runner option | 1 | phil@nwl.cc | skipped |
| 2026-07-15 14:48 UTC | netfilter: conntrack: prevent helper extension relocation | 1 | iostreampy@proton.me | finished in 4h53m0s |
| 2026-07-14 03:21 UTC | netfilter: ip6tables: set hotdrop for malformed extension header matches | 2 | running910@gmail.com | finished in 5h27m0s |
| 2026-07-13 18:36 UTC | netfilter: nft_fib: bail out if input device is missing | 1 | xmei5@asu.edu | finished in 5h11m0s |
| 2026-07-13 16:33 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 3 | bestswngs@gmail.com | finished in 5h12m0s |
| 2026-07-13 16:15 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 2 | bestswngs@gmail.com | finished in 55m0s |
| 2026-07-13 12:53 UTC | selftests: netfilter: nft_flowtable.sh: fix offload counter verification for tunnel tests | 2 | lorenzo@kernel.org | skipped |
| 2026-07-13 12:46 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 6 | lorenzo@kernel.org | skipped |
| 2026-07-13 11:07 UTC | net: sysctl: Const Qualify sysctl ctl_table arrays | 3 | joel.granados@kernel.org | finished in 5h22m0s |
| 2026-07-13 09:59 UTC | netfilter: ipset: do not update comments from kernel-side hash adds | 1 | david.lee@trailofbits.com | finished in 5h33m0s |
| 2026-07-13 09:48 UTC | ipvs: fix destination overload state updates | 3 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h28m0s |
| 2026-07-12 23:42 UTC | netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() | 1 | xmei5@asu.edu | finished in 3h29m0s |
| 2026-07-12 07:32 UTC | netfilter: nf_nat: stop reusing DEAD RTP expectations | 2 | iostreampy@proton.me | finished in 5h12m0s |
| 2026-07-11 14:21 UTC | netfilter: nf_nat: do not reuse an unexpected expectation on RTCP clash | 1 | iostreampy@proton.me | finished in 2h55m0s |
| 2026-07-11 13:55 UTC | selftests: netfilter: nft_flowtable.sh: check offload counters for IP6IP6 tunnel test | 1 | lorenzo@kernel.org | skipped |
| 2026-07-10 15:14 UTC | Address Sashiko review of NAT hook dump code | 3 | phil@nwl.cc | finished in 4h51m0s |
| 2026-07-10 13:27 UTC | netfilter: nf_nat: recalculate TCP TS offset after SNAT port rewrite | 3 | xietangxin@h-partners.com | finished in 4h51m0s |
| 2026-07-09 19:46 UTC | Address Sashiko review of NAT hook dump code | 2 | phil@nwl.cc | finished in 3h4m0s |
| 2026-07-09 13:12 UTC | netfilter: nf_nat: recalculate TCP TS offset when snat change sport | 2 | xietangxin@h-partners.com | finished in 4h57m0s |
| 2026-07-09 08:52 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 5 | lorenzo@kernel.org | finished in 5h8m0s |
| 2026-07-09 06:30 UTC | netfilter: ip6tables: set hotdrop for malformed extension header matches | 1 | running910@gmail.com | finished in 5h17m0s |
| 2026-07-08 18:11 UTC | netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() | 2 | xmei5@asu.edu | finished in 2h42m0s |
| 2026-07-08 16:19 UTC | Address Sashiko review of NAT hook dump code | 1 | phil@nwl.cc |
finished
in 2h11m0s
[1 findings] |
| 2026-07-08 06:04 UTC | ipvs: make destination flags atomic | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h24m0s |
| 2026-07-08 05:27 UTC | netfilter: nf_conncount: fix zone comparison in tuple dedup | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h7m0s |
| 2026-07-07 19:51 UTC | netfilter: replace u_int*_t with kernel int types (batch 3) | 1 | carlos@carlosgrillet.me | skipped |
| 2026-07-07 11:00 UTC | netfilter: ecache: fix inverted time_after() check | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h58m0s |
| 2026-07-07 09:10 UTC | netfilter: Add bridge-fastpath | 12 | ericwouds@gmail.com | finished in 4h54m0s |
| 2026-07-07 08:57 UTC | ipvs: make destination flags atomic | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h58m0s |
| 2026-07-07 06:46 UTC | ss: Don't re-print an SCTP listen socket as an assoc | 1 | jamie.bainbridge@gmail.com | skipped |
| 2026-07-06 23:28 UTC | netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() | 1 | xmei5@asu.edu | finished in 2h51m0s |
| 2026-07-06 11:48 UTC | netfilter: nf_conncount: fix zone comparison in tuple dedup | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h13m0s |
| 2026-07-06 10:16 UTC | ipvs: use parsed transport offsets in state handlers | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h28m0s |
| 2026-07-05 23:36 UTC | netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag | 1 | xmei5@asu.edu | finished in 4h55m0s |
| 2026-07-05 21:58 UTC | netfilter: ebtables: terminate table name before find_table_lock() | 1 | xmei5@asu.edu | finished in 4h26m0s |
| 2026-07-05 12:56 UTC | ipvs: skip IPv6 extension headers in TCP state lookup | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h25m0s |
| 2026-07-05 12:30 UTC | ipvs: skip IPv6 extension headers in SCTP state lookup | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h6m0s |
| 2026-07-03 16:22 UTC | netfilter: nft_lookup: fix catchall element handling with inverted lookups | 1 | ty@000ty.net | finished in 4h0m0s |
| 2026-07-03 14:10 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 4 | lorenzo@kernel.org | finished in 4h55m0s |
| 2026-07-03 07:32 UTC | netfilter: xt_time: reject pre-epoch calendar matching | 1 | enjou1224z@gmail.com | finished in 4h25m0s |
| 2026-07-03 05:04 UTC | netfilter: xt_connmark: reject invalid shift parameters | 1 | enjou1224z@gmail.com | finished in 4h51m0s |
| 2026-07-02 11:28 UTC | ipvs: reset full ip_vs_seq structs in ip_vs_conn_new | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 2h39m0s |
| 2026-07-02 10:10 UTC | ipvs: Move defense_work and est_reload_work to system_dfl_long_wq | 2 | iluceno@suse.de | finished in 1h34m0s |
| 2026-07-02 07:34 UTC | ipvs: fix PMTU for GUE/GRE tunnel ICMP errors | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h41m0s |
| 2026-07-01 10:09 UTC | netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop | 2 | running910@gmail.com | finished in 30m0s |
| 2026-07-01 06:59 UTC | ipvs: fix PMTU for GUE/GRE tunnel ICMP errors | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h25m0s |
| 2026-06-30 06:57 UTC | netfilter: nf_flow_table_path: L2 bridge offload | 2 | pawlik.dan@gmail.com | finished in 4h32m0s |
| 2026-06-29 12:32 UTC | netfilter: nf_flow_table_path: L2 bridge offload | 1 | pawlik.dan@gmail.com | finished in 4h44m0s |
| 2026-06-29 10:53 UTC | netfilter: nft_fib: reject fib expression on the netdev egress hook | 2 | theodorlarionov@gmail.com | finished in 4h11m0s |
| 2026-06-29 09:33 UTC | netfilter: nf_nat_masquerade: recalculate TCP TS offset when port is randomized | 1 | xietangxin@h-partners.com | finished in 4h17m0s |
| 2026-06-28 08:05 UTC | netfilter: xt_u32: reject invalid shift counts | 1 | n05ec@lzu.edu.cn | finished in 4h33m0s |
| 2026-06-27 16:05 UTC | ipvs: preserve conn hash flags when late-binding dest | 1 | n05ec@lzu.edu.cn | finished in 4h5m0s |
| 2026-06-26 22:25 UTC | netfilter: x_tables: replace strlcat() with snprintf() | 1 | icb@fastmail.org | skipped |
| 2026-06-26 06:49 UTC | netfilter: nf_conntrack_sip: guard against missing skb dst | 1 | n05ec@lzu.edu.cn | finished in 2h9m0s |
| 2026-06-25 17:25 UTC | netfilter: replace u_int*_t with kernel int types (batch 2) | 2 | carlos@carlosgrillet.me | skipped |
| 2026-06-25 13:31 UTC | netfilter: remove redundant null check before kvfree() | 1 | subasris1210@gmail.com | skipped |
| 2026-06-25 12:28 UTC | netfilter: nft_fib: reject fib expression on the netdev egress hook | 1 | theodorlarionov@gmail.com | finished in 4h14m0s |
| 2026-06-25 01:00 UTC | netfilter: ipset: fix race between dump and ip_set_list resize | 1 | xmei5@asu.edu | finished in 4h33m0s |
| 2026-06-24 18:40 UTC | netfilter: replace u_int*_t with kernel int types (batch 2) | 1 | carlos@carlosgrillet.me | skipped |
| 2026-06-21 18:49 UTC | netfilter: TCPMSS: handle packets with unaligned MSS option | 3 | kacper.kokot.44@gmail.com | finished in 4h2m0s |
| 2026-06-18 12:58 UTC | netfilter: ip6t_ah: validate AH header length | 1 | running910@gmail.com | finished in 4h13m0s |
| 2026-06-18 11:17 UTC | tests: shell: Run tests with a fixed TZ | 1 | phil@nwl.cc | skipped |
| 2026-06-18 10:18 UTC | bpf: Guard conntrack opts error writes | 2 | chenyy23@mails.tsinghua.edu.cn | finished in 1h7m0s |
| 2026-06-17 17:06 UTC | netfilter: nf_flow_table: separate tunnel route state from direct xmit | 2 | n05ec@lzu.edu.cn | finished in 4h35m0s |
| 2026-06-16 18:29 UTC | netfilter: replace u_int*_t with kernel int types | 3 | carlos@carlosgrillet.me | finished in 1h40m0s |
| 2026-06-16 05:42 UTC | bpf: Guard conntrack opts error writes | 1 | chenyy23@mails.tsinghua.edu.cn | finished in 55m0s |
| 2026-06-15 13:38 UTC | netfilter: replace u_int*_t with kernel int types | 2 | carlos@carlosgrillet.me | finished in 1h56m0s |