| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-03-17 10:17 UTC | bridge: Introduce DEV_PATH_BR_VLAN_KEEP_HW | 12 | ericwouds@gmail.com | - |
| 2026-03-17 10:15 UTC | netfilter: nft_flow_offload: Add DEV_PATH_MTK_WDMA to nft_dev_path_info() | 12 | ericwouds@gmail.com | - |
| 2026-03-15 17:06 UTC | netfilter: add missing kernel-doc parameters for nf_hook() | 2 | xaum.io@gmail.com | finished in 4h30m0s |
| 2026-03-13 18:01 UTC | netfilter: ipset: harden payload calculation in call_ad() | 1 | davidbaum461@gmail.com | finished in 4h25m0s |
| 2026-03-13 15:32 UTC | netfilter: nfnetlink_hook: Dump nat type chains | 1 | phil@nwl.cc | finished in 4h14m0s |
| 2026-03-13 10:44 UTC | Revert "tests: py: use `os.unshare` Python function" | 1 | phil@nwl.cc | skipped |
| 2026-03-12 22:31 UTC | netfilter: conntrack: expose gc_scan_interval_max via sysctl | 2 | panchamukhi@arista.com | finished in 4h12m0s |
| 2026-03-11 19:40 UTC | netfilter: conntrack: expose gc_scan_interval_max via sysctl | 1 | panchamukhi@arista.com | finished in 4h4m0s |
| 2026-03-11 19:33 UTC | cache: Fix for multiple commands in a single batch | 1 | phil@nwl.cc | skipped |
| 2026-03-10 23:11 UTC | Enhance cache filter for list commands | 1 | phil@nwl.cc | skipped |
| 2026-03-10 17:18 UTC | xtables-translate: Return non-zero if translation fails | 1 | phil@nwl.cc | skipped |
| 2026-03-10 14:39 UTC | netfilter: nf_flow_table_ip: reset mac header before vlan push | 1 | ericwouds@gmail.com | finished in 4h12m0s |
| 2026-03-09 20:29 UTC | netfilter: nf_tables: Fix typo in enum description | 1 | jelle@vdwaa.nl | finished in 1h3m0s |
| 2026-03-07 17:24 UTC | netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path | 1 | imv4bel@gmail.com | finished in 3h58m0s |
| 2026-03-07 17:23 UTC | netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() | 1 | imv4bel@gmail.com | finished in 4h4m0s |
| 2026-03-07 17:23 UTC | netfilter: nf_flow_table_offload: fix heap overflow in flow_action_entry_next() | 1 | imv4bel@gmail.com | finished in 4h7m0s |
| 2026-03-07 17:22 UTC | netfilter: nf_conntrack_sctp: validate state value in nlattr_to_sctp() | 1 | imv4bel@gmail.com | finished in 4h13m0s |
| 2026-03-07 17:22 UTC | netfilter: ctnetlink: validate CTA_EXPECT_NAT_DIR to prevent OOB access | 1 | imv4bel@gmail.com | finished in 3h56m0s |
| 2026-03-07 17:21 UTC | netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() | 1 | imv4bel@gmail.com | finished in 3h59m0s |
| 2026-03-07 17:21 UTC | netfilter: ctnetlink: fix use-after-free of exp->master in single expectation GET | 1 | imv4bel@gmail.com | finished in 4h8m0s |
| 2026-03-07 17:20 UTC | netfilter: ctnetlink: fix use-after-free of exp->master in expectation dump | 1 | imv4bel@gmail.com | finished in 4h4m0s |
| 2026-03-05 12:01 UTC | netfilter: nf_tables: Fix for duplicate device in netdev hooks | 1 | phil@nwl.cc | finished in 4h13m0s |
| 2026-03-05 11:15 UTC | include: linux: nf_tables.h: Sync with current kernel UAPI headers | 1 | phil@nwl.cc | skipped |
| 2026-03-03 19:57 UTC | doc/netlink: Expand nftables specification | 8 | one-d-wide@protonmail.com | finished in 1h5m0s |
| 2026-03-03 10:15 UTC | netfilter: use function typedefs for __rcu NAT helper hook pointers | 1 | sun.jian.kdev@gmail.com | finished in 1h39m0s |
| 2026-03-02 21:26 UTC | netfilter: nf_tables: fix use-after-free on ops->dev | 1 | koike@igalia.com | finished in 4h16m0s |
| 2026-02-27 16:29 UTC | netfilter: nf_flow_table_ip: Introduce nf_flow_vlan_push() | 2 | ericwouds@gmail.com | finished in 4h11m0s |
| 2026-02-26 15:08 UTC | monitor: Call FD_ISSET with valid descriptors only | 1 | phil@nwl.cc | skipped |
| 2026-02-24 06:53 UTC | conntrack: bridge: add double vlan, pppoe and pppoe-in-q | 19 | ericwouds@gmail.com | finished in 4h18m0s |
| 2026-02-22 19:58 UTC | conntrack: bridge: add double vlan, pppoe and pppoe-in-q | 18 | ericwouds@gmail.com | finished in 3h50m0s |
| 2026-02-22 15:52 UTC | netfilter: nf_flow_table_ip: Introduce nf_flow_vlan_push() | 1 | ericwouds@gmail.com | finished in 3h56m0s |
| 2026-02-14 15:08 UTC | include: linux: nf_tables.h: Sync with current kernel UAPI headers | 1 | phil@nwl.cc | skipped |
| 2026-02-14 14:54 UTC | include: uapi: netfilter_bridge.h: Cover for musl libc | 2 | phil@nwl.cc | finished in 59m0s |
| 2026-02-12 20:50 UTC | configure: Implement --enable-profiling option | 4 | phil@nwl.cc | skipped |
| 2026-02-12 20:07 UTC | iptables: fix null dereference parsing bitwise operations | 2 | one-d-wide@protonmail.com | skipped |
| 2026-02-11 20:14 UTC | configure: Implement --enable-profiling option | 3 | phil@nwl.cc | skipped |
| 2026-02-11 19:42 UTC | useful_functions: Fix for buffer overflow in parse_ip6_mask() | 1 | phil@nwl.cc | skipped |
| 2026-02-11 18:56 UTC | include: uapi: netfilter_bridge.h: Cover for musl libc | 1 | phil@nwl.cc | finished in 1h5m0s |
| 2026-02-08 11:00 UTC | net: flow_offload: protect driver_block_list in flow_block_cb_setup_simple() | 1 | syoshida@redhat.com | finished in 3h20m0s |
| 2026-02-05 15:18 UTC | configure: Implement --enable-profiling option | 2 | phil@nwl.cc | skipped |
| 2026-02-05 14:38 UTC | Makefile: Pass PKG_CONFIG_PATH to internal builds | 2 | phil@nwl.cc | skipped |
| 2026-02-04 15:23 UTC | netfilter: nf_tables: add math expression support | 3 | fmancera@suse.de | finished in 1h19m0s |
| 2026-02-04 14:49 UTC | test: shell: run-test.sh: introduce NFT_TEST_EXCLUDES | 1 | yiche@redhat.com | skipped |
| 2026-02-03 14:55 UTC | netfilter: amanda: fix RCU pointer typing for nf_nat_amanda_hook | 2 | sun.jian.kdev@gmail.com | finished in 1h39m0s |
| 2026-02-03 13:48 UTC | netfilter: nft_counter: Fix reset of counters on 32bit archs | 3 | anders.grahn@gmail.com | finished in 4h10m0s |
| 2026-02-03 08:43 UTC | netfilter: bpf: add missing declaration for bpf_ct_set_nat_info | 1 | sun.jian.kdev@gmail.com | finished in 1h1m0s |
| 2026-02-03 08:01 UTC | netfilter: amanda: fix RCU pointer typing for nf_nat_amanda_hook | 1 | sun.jian.kdev@gmail.com | finished in 1h40m0s |
| 2026-02-02 10:14 UTC | iptables: fix null dereference parsing bitwise operations | 1 | one-d-wide@protonmail.com | skipped |
| 2026-02-02 09:40 UTC | doc/netlink: Expand nftables specification | 7 | one-d-wide@protonmail.com | finished in 1h11m0s |
| 2026-01-30 07:22 UTC | netfilter: flowtable: dedicated slab for flow entry | 2 | dqfext@gmail.com | finished in 3h52m0s |
| 2026-01-30 04:43 UTC | netfilter: conntrack: remove __read_mostly from nf_conntrack_generation | 1 | lirongqing@baidu.com | finished in 3h54m0s |
| 2026-01-29 19:58 UTC | configure: Auto-detect libz unless explicitly requested | 1 | phil@nwl.cc | skipped |
| 2026-01-29 19:57 UTC | tests: shell: Review nft-only/0009-needless-bitwise_0 | 1 | phil@nwl.cc | skipped |
| 2026-01-29 19:56 UTC | ruleparse: arp: Fix for all-zero mask on Big Endian | 2 | phil@nwl.cc | skipped |
| 2026-01-29 18:28 UTC | tests: shell: Review nft-only/0009-needless-bitwise_0 | 1 | phil@nwl.cc | skipped |
| 2026-01-29 14:07 UTC | tests: py: Adjust payloads to changed userdata printing | 1 | phil@nwl.cc | skipped |
| 2026-01-29 14:07 UTC | Revert "udata: Store u32 udata values in Big Endian" | 1 | phil@nwl.cc | skipped |
| 2026-01-29 10:12 UTC | netfilter: flowtable: dedicated slab for flow entry | 1 | dqfext@gmail.com | finished in 4h0m0s |
| 2026-01-28 21:44 UTC | ruleparse: arp: Fix for all-zero mask on Big Endian | 1 | phil@nwl.cc | skipped |
| 2026-01-28 14:52 UTC | configure: Generate BUILD_STAMP at configure time | 1 | phil@nwl.cc | skipped |
| 2026-01-27 22:30 UTC | Makefile.am: Drop pointless per-project AM_CPPFLAGS | 1 | phil@nwl.cc | skipped |
| 2026-01-27 22:29 UTC | Inspect and improve test suite code coverage | 1 | phil@nwl.cc | skipped |
| 2026-01-27 22:15 UTC | Makefile: Set PKG_CONFIG_PATH env for 'make check' | 1 | phil@nwl.cc | skipped |
| 2026-01-27 22:12 UTC | doc: nft.8: Describe iface_type data type | 1 | phil@nwl.cc | skipped |
| 2026-01-23 11:58 UTC | libxtables: Store all requested target types | 1 | phil@nwl.cc | skipped |
| 2026-01-23 08:10 UTC | netfilter: xt_time: use is_leap_year() helper | 1 | ruanjinjie@huawei.com | finished in 4h40m0s |
| 2026-01-22 17:46 UTC | Add IP6IP6 flowtable SW acceleration | 4 | lorenzo@kernel.org | finished in 4h9m0s |
| 2026-01-21 18:47 UTC | doc/netlink: Expand nftables specification | 6 | one-d-wide@protonmail.com | finished in 54m0s |
| 2026-01-20 23:11 UTC | selftests: netfilter: avoid RULE_REPLACE error when zeroing rule counters | 1 | aleksey.oladko@virtuozzo.com | finished in 1h6m0s |
| 2026-01-20 22:01 UTC | selftests: netfilter: ensure conntrack is enabled for helper test | 1 | aleksey.oladko@virtuozzo.com | finished in 1h22m0s |
| 2026-01-20 19:53 UTC | parser_json: support handle for rule positioning | 6 | knecht.alexandre@gmail.com | skipped |
| 2026-01-19 20:35 UTC | netfilter: nf_conncount: fix tracking of connections from localhost | 2 | fmancera@suse.de | finished in 3h59m0s |
| 2026-01-19 14:08 UTC | parser_json: support handle for rule positioning | 5 | knecht.alexandre@gmail.com | skipped |
| 2026-01-19 09:16 UTC | netfilter: nf_flow_table_bpf: add prototype for bpf_xdp_flow_lookup() | 1 | sun.jian.kdev@gmail.com | finished in 1h10m0s |
| 2026-01-19 06:37 UTC | netfilter: arptables: use xt_entry_foreach() in copy_entries_to_user() | 1 | kshitiz.bartariya@zohomail.in | finished in 4h0m0s |
| 2026-01-18 11:13 UTC | netfilter: nf_conncount: fix tracking of connections from localhost | 1 | fmancera@suse.de | finished in 4h7m0s |
| 2026-01-16 08:13 UTC | Add IP6IP6 flowtable SW acceleration | 3 | lorenzo@kernel.org | finished in 4h6m0s |
| 2026-01-13 07:44 UTC | uapi: Use UAPI definitions of INT_MAX and INT_MIN | 2 | thomas.weissschuh@linutronix.de | finished in 52m0s |
| 2026-01-12 12:54 UTC | net: make config options NF_LOG_{ARP,IPV4,IPV6} transitional | 1 | lbulwahn@redhat.com | finished in 1h2m0s |
| 2026-01-11 16:39 UTC | net/sched: Fix packet loops in mirred and netem | 1 | jhs@mojatatu.com | finished in 3h51m0s |
| 2026-01-05 08:26 UTC | uapi: Use UAPI definitions of INT_MAX and INT_MIN | 1 | thomas.weissschuh@linutronix.de | finished in 1h10m0s |
| 2025-12-25 21:02 UTC | net: sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop | 4 | jhs@mojatatu.com | finished in 3h49m0s |
| 2025-12-24 12:48 UTC | netfilter: nf_tables: Fix memory leak in nf_tables_newrule() | 1 | zilin@seu.edu.cn | finished in 3h58m0s |
| 2025-12-19 05:13 UTC | netfilter: replace -EEXIST with -EBUSY | 1 | da.gomez@kernel.org | finished in 3h50m0s |
| 2025-12-16 14:46 UTC | tests: monitor: Fix for out-of-path call | 1 | phil@nwl.cc | skipped |
| 2025-12-15 16:15 UTC | net: sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop | 3 | jhs@mojatatu.com | finished in 4h2m0s |
| 2025-12-15 15:32 UTC | netfilter: nft_counter: Fix reset of counters on 32bit archs | 2 | anders.grahn@gmail.com | finished in 3h51m0s |
| 2025-12-15 12:12 UTC | netfilter: nft_counter: Fix reset of counters on 32bit archs | 1 | anders.grahn@gmail.com | finished in 3h52m0s |
| 2025-12-10 21:49 UTC | datatype: Accept IPv4 addresses for ip6addr_type | 1 | phil@nwl.cc | skipped |
| 2025-12-10 15:03 UTC | src: Convert ip {s,d}addr to IPv4-mapped as needed | 2 | phil@nwl.cc | skipped |
| 2025-12-09 16:45 UTC | parser_bison: Less STRING more tokens | 1 | phil@nwl.cc | skipped |
| 2025-12-09 15:40 UTC | src: Implement ip {s,d}addr6 expressions | 1 | phil@nwl.cc | skipped |
| 2025-12-09 07:35 UTC | Add IP6IP6 flowtable SW acceleration | 2 | lorenzo@kernel.org | finished in 3h49m0s |
| 2025-12-07 16:06 UTC | Add IP6IP6 flowtable SW acceleration | 1 | lorenzo@kernel.org |
finished
in 3h52m0s
[3 findings] |
| 2025-12-03 13:20 UTC | netfilter: nft_set_hash: fix potential NULL deref in nft_rhash_deactivate | 1 | mlbnkm1@gmail.com | finished in 53m0s |
| 2025-12-01 13:45 UTC | Add IP6IP6 flowtable SW acceleration | 1 | lorenzo@kernel.org |
finished
in 3h49m0s
[1 findings] |
| 2025-12-01 10:22 UTC | netfilter: Always set route tuple out ifindex | 1 | lorenzo@kernel.org | finished in 1h44m0s |
| 2025-11-27 22:21 UTC | selftests: netfilter: nft_flowtable.sh: Add the capability to send IPv6 TCP traffic | 2 | lorenzo@kernel.org | finished in 49m0s |
| 2025-11-27 12:33 UTC | netfilter: x_tables: statistic nth match account GRO/GSO packets | 1 | hawk@kernel.org | finished in 3h51m0s |
| 2025-11-26 15:13 UTC | parser_bison: Less STRING more tokens | 1 | phil@nwl.cc | skipped |