| 2026-10-13 23:43 UTC |
netfilter: pin file with get_file_rcu() before reading f_cred |
1 |
tristmd@gmail.com |
in progress
|
| 2026-10-13 20:57 UTC |
neighbour: Misc follow-ups on per-netns neigh_table series. |
2 |
kuniyu@google.com |
finished
in 3h59m0s
|
| 2026-10-13 10:58 UTC |
more virtio-net csum hardening |
1 |
mst@redhat.com |
finished
in 4h25m0s
|
| 2026-10-12 19:44 UTC |
neighbour: Misc follow-ups on per-netns neigh_table series. |
1 |
kuniyu@google.com |
finished
in 4h13m0s
|
| 2026-10-12 16:33 UTC |
netfilter: ipset: fix double free on kernel-side delete during resize |
1 |
fuchen.dust@gmail.com |
finished
in 4h40m0s
|
| 2026-10-12 09:08 UTC |
netfilter: nf_conntrack_h323: fix NULL deref in decode_seqof() |
1 |
zhugl3@xiaopeng.com |
finished
in 2h2m0s
|
| 2026-10-11 11:28 UTC |
netfilter: nf_dup: preserve duplication guard across NFQUEUE |
7 |
zihanx@nebusec.ai |
finished
in 4h0m0s
|
| 2026-10-09 16:26 UTC |
netfilter: synproxy: check TCP header before verifying checksum |
2 |
raghunathpalla.0209@gmail.com |
finished
in 4h36m0s
|
| 2026-10-09 15:02 UTC |
netfilter: bridge: refragment reassembled packets passed up |
1 |
g.goller@proxmox.com |
finished
in 4h10m0s
|
| 2026-10-09 12:41 UTC |
netfilter: nf_conntrack_h323: fix NULL pointer deref in decode_seqof() |
1 |
bsdhenrymartin@gmail.com |
finished
in 4h39m0s
|
| 2026-10-08 18:23 UTC |
extensions: libxt_conntrack: Fail on untranslatable state match |
1 |
phil@nwl.cc |
skipped
|
| 2026-10-08 17:40 UTC |
netfilter: nft_exthdr: add inner option type search for MPTCP |
1 |
fmancera@suse.de |
finished
in 4h40m0s
|
| 2026-10-08 15:28 UTC |
netfilter: nf_conntrack_sip: only honour Via: port in original direction |
2 |
joasantonio108@gmail.com |
finished
in 4h26m0s
|
| 2026-10-08 10:33 UTC |
netfilter: x_tables: avoid holding mutex over faultable user copies |
5 |
zihanx@nebusec.ai |
finished
in 1h10m0s
|
| 2026-10-08 07:08 UTC |
netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns |
6 |
zihanx@nebusec.ai |
finished
in 4h26m0s
|
| 2026-10-08 05:42 UTC |
netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets |
3 |
lvjunyu@cmss.chinamobile.com |
finished
in 4h8m0s
|
| 2026-10-08 05:02 UTC |
netfilter: nf_conntrack_reasm: avoid truncating header offsets |
2 |
tjdqudcks0424@naver.com |
finished
in 4h8m0s
|
| 2026-10-08 02:45 UTC |
netfilter: ebtables: ebt_802_3: check the LLC fields before reading them |
2 |
guozh23@xiaopeng.com |
finished
in 1h50m0s
|
| 2026-10-07 22:42 UTC |
ipv4: validate checksum_start before completing checksum |
1 |
mst@redhat.com |
finished
in 4h4m0s
|
| 2026-10-07 18:20 UTC |
netfilter: nft_set_pipapo: skip transaction elements during GC |
1 |
dungvn2345@gmail.com |
finished
in 3h58m0s
|
| 2026-10-07 15:48 UTC |
netfilter: ip6t_NPT: ensure skb is writable before header modification |
3 |
joasantonio108@gmail.com |
finished
in 4h43m0s
|
| 2026-10-07 15:25 UTC |
netfilter: nf_conntrack_sip: only honour Via: port in original direction |
1 |
joasantonio108@gmail.com |
finished
in 4h30m0s
|
| 2026-10-07 01:48 UTC |
netfilter: conntrack: avoid recursive master destruction |
3 |
4ncienth@gmail.com |
finished
in 4h29m0s
|
| 2026-10-06 20:48 UTC |
doc: add MPTCP subtypes documentation to man page |
2 |
fmancera@suse.de |
skipped
|
| 2026-10-06 08:58 UTC |
netfilter: nf_conntrack: add ct expression support for netdev egress chains |
1 |
hari.chandrakanthan@oss.qualcomm.com |
finished
in 4h11m0s
|
| 2026-10-06 06:53 UTC |
netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode |
2 |
subhampal789@gmail.com |
skipped
|
| 2026-10-05 20:04 UTC |
netfilter: nft_set_rbtree: reject expired interval ends |
1 |
jeremy.jean@oss.cyber.gouv.fr |
finished
in 3h58m0s
|
| 2026-10-05 15:12 UTC |
netfilter: nft_synproxy: only handle pure SYN and ACK packets |
2 |
ngocthang2710.1999@gmail.com |
finished
in 4h7m0s
|
| 2026-10-05 13:06 UTC |
ipvs: avoid stack overflow from recursive connection expiration |
6 |
zihanx@nebusec.ai |
finished
in 4h21m0s
|
| 2026-10-04 21:24 UTC |
netfilter: preserve bridge egress VLAN tags |
2 |
parri.andrea@gmail.com |
finished
in 4h1m0s
|
| 2026-10-04 17:16 UTC |
netfilter: flowtable: carry a priority into the offload |
3 |
julius@bairaktaris.de |
finished
in 3h57m0s
|
| 2026-10-04 17:16 UTC |
netfilter: flowtable: update upper device stats in the fast path |
1 |
julius@bairaktaris.de |
finished
in 4h1m0s
|
| 2026-10-04 17:16 UTC |
netfilter: flowtable: tear down bridged flows on layer 2 roaming |
6 |
julius@bairaktaris.de |
finished
in 4h12m0s
|
| 2026-10-04 16:06 UTC |
netfilter: nft_synproxy: only handle pure SYN and ACK packets |
1 |
ngocthang2710.1999@gmail.com |
finished
in 4h11m0s
|
| 2026-10-02 20:10 UTC |
netfilter: nf_nat: replace u_int16_t with u16 |
1 |
carlos@carlosgrillet.me |
skipped
|
| 2026-10-02 16:56 UTC |
netfilter: conntrack: reject nested ctnetlink master chains |
2 |
4ncienth@gmail.com |
finished
in 3h58m0s
|
| 2026-10-02 14:45 UTC |
Fix for warnings when compiling for 32bit arch |
2 |
phil@nwl.cc |
skipped
|
| 2026-10-02 12:49 UTC |
extensions: libxt_conntrack: Fix inverted ctstate translation |
1 |
phil@nwl.cc |
skipped
|
| 2026-10-02 08:42 UTC |
netfilter: flowtable: use the vlan id, not the full tci, in the tuple key |
1 |
huangya90@gmail.com |
finished
in 4h4m0s
|
| 2026-10-01 18:02 UTC |
netfilter: conntrack: avoid recursive master destruction |
1 |
4ncienth@gmail.com |
finished
in 4h20m0s
|
| 2026-09-30 07:14 UTC |
net: bridge: vlan: optimize standard fdb fwding path |
1 |
razor@blackwall.org |
finished
in 4h6m0s
|
| 2026-09-29 12:58 UTC |
netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns |
5 |
zihanx@nebusec.ai |
finished
in 4h6m0s
|
| 2026-09-29 09:00 UTC |
netfilter: nf_conntrack_reasm: avoid truncating header offset |
1 |
tjdqudcks0424@naver.com |
finished
in 3h46m0s
|
| 2026-09-28 17:33 UTC |
netfilter: conntrack: shared port parser for helpers |
5 |
rc@rexion.ai |
finished
in 3h51m0s
|
| 2026-09-28 16:18 UTC |
netfilter: br_netfilter: restore VLAN tag on refragmented IPv6 packets |
1 |
parri.andrea@gmail.com |
finished
in 4h0m0s
|
| 2026-09-28 12:46 UTC |
net: cap skb->queue_mapping when the tx queue is picked |
4 |
jhs@mojatatu.com |
finished
in 1h5m0s
|
| 2026-09-28 08:28 UTC |
netfilter: ebtables: ebt_802_3: drop short frames before the match reads LLC |
1 |
guozh23@xiaopeng.com |
finished
in 2h26m0s
|
| 2026-09-27 16:32 UTC |
netfilter: flowtable: flush delete work after final GC |
2 |
nicoyip.dev@gmail.com |
finished
in 4h5m0s
|
| 2026-09-27 07:15 UTC |
netfilter: nf_tables: serialize offload stats with callback unbind |
1 |
nicoyip.dev@gmail.com |
finished
in 5h5m0s
|
| 2026-09-27 06:24 UTC |
ipvs: fix protocol data lifetime during namespace teardown |
1 |
nicoyip.dev@gmail.com |
finished
in 1h55m0s
|
| 2026-09-27 04:31 UTC |
netfilter: x_tables: avoid holding mutex over faultable user copies |
4 |
zihanx@nebusec.ai |
finished
in 4h6m0s
|
| 2026-09-26 20:45 UTC |
netfilter: ip6t_SYNPROXY: check TCP header before verifying checksum |
1 |
raghunathpalla.0209@gmail.com |
finished
in 3h49m0s
|
| 2026-09-26 17:52 UTC |
netfilter: conntrack: wait for RCU readers before freeing the hash |
1 |
nicoyip.dev@gmail.com |
finished
in 4h7m0s
|
| 2026-09-26 17:51 UTC |
ipvs: Defer application parent freeing until after RCU readers |
1 |
nicoyip.dev@gmail.com |
finished
in 4h2m0s
|
| 2026-09-26 09:19 UTC |
netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns |
4 |
zihanx@nebusec.ai |
finished
in 3h59m0s
|
| 2026-09-25 19:36 UTC |
ipvs: wait grace period while reusing dest from trash |
2 |
weir@nebusec.ai |
finished
in 3h56m0s
|
| 2026-09-25 16:40 UTC |
ipvs: avoid stack overflow from recursive connection expiration |
5 |
zihanx@nebusec.ai |
finished
in 3h58m0s
|
| 2026-09-25 14:11 UTC |
ipvs: fix OOB write when NATing ICMPv6 errors quoting non-first fragments |
1 |
axel.mierczuk@1password.com |
finished
in 4h19m0s
|
| 2026-09-25 14:11 UTC |
ipvs: keep templates and cport 0 conns away from packet lookups |
1 |
axel.mierczuk@1password.com |
finished
in 4h0m0s
|
| 2026-09-25 13:51 UTC |
expr: add support to math expression |
5 |
fmancera@suse.de |
skipped
|
| 2026-09-25 13:49 UTC |
netfilter: nf_tables: add math expression support |
6 |
fmancera@suse.de |
finished
in 2h24m0s
|
| 2026-09-24 20:25 UTC |
netfilter: nf_flow_table_bpf: populate VLAN encap in XDP flowtable lookup |
1 |
adrianox@gmail.com |
finished
in 3h18m0s
|
| 2026-09-24 20:13 UTC |
netfilter: nft_reject: prevent unbounded recursion in output hooks |
3 |
fmancera@suse.de |
finished
in 4h0m0s
|
| 2026-09-23 09:54 UTC |
ipvs: avoid stack overflow from recursive connection expiration |
4 |
zihanx@nebusec.ai |
finished
in 4h18m0s
|
| 2026-09-23 04:23 UTC |
netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode |
1 |
subhampal789@gmail.com |
skipped
|
| 2026-09-22 19:18 UTC |
netfilter: bpf: reject invalid NAT manipulation types |
1 |
fmancera@suse.de |
finished
in 4h4m0s
|
| 2026-09-22 17:39 UTC |
netfilter: ecache: bound destroy event redelivery |
1 |
weir@nebusec.ai |
finished
in 3h46m0s
|
| 2026-09-22 16:40 UTC |
netfilter: nft_nat: use the right enum members for nat type switch |
1 |
fmancera@suse.de |
finished
in 1h3m0s
|
| 2026-09-22 09:52 UTC |
netfilter: nf_dup: disable duplication in user namespaces |
3 |
zihanx@nebusec.ai |
finished
in 5h23m0s
|
| 2026-09-22 09:25 UTC |
netfilter: nft_reject: prevent unbounded recursion in output hooks |
2 |
fmancera@suse.de |
finished
in 4h33m0s
|
| 2026-09-22 09:08 UTC |
ipvs: skip committing sync_threshold when proc_dointvec fails |
1 |
joel.granados@kernel.org |
finished
in 4h0m0s
|
| 2026-09-22 06:23 UTC |
netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets |
3 |
lvjunyu@cmss.chinamobile.com |
finished
in 4h29m0s
|
| 2026-09-22 03:03 UTC |
net: prevent partial checksums from modifying network headers |
6 |
habte.yibelo@gmail.com |
finished
in 4h2m0s
|
| 2026-09-21 22:29 UTC |
netfilter: nft_reject: prevent unbounded recursion in output hooks |
1 |
fmancera@suse.de |
finished
in 4h3m0s
|
| 2026-09-21 14:55 UTC |
ovs, net/sched: fixes for UAF after conntrack extension realloc |
1 |
i.maximets@ovn.org |
finished
in 4h24m0s
|
| 2026-09-21 13:03 UTC |
netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets |
2 |
lvjunyu@cmss.chinamobile.com |
finished
in 4h1m0s
|
| 2026-09-21 02:53 UTC |
net: prevent partial checksums from modifying network headers |
5 |
habte.yibelo@gmail.com |
finished
in 3h47m0s
|
| 2026-09-21 02:08 UTC |
netfilter: nft_set_rbtree: skip transaction elements during GC |
1 |
bestswngs@gmail.com |
finished
in 4h20m0s
|
| 2026-09-20 11:58 UTC |
netfilter: x_tables: avoid holding mutex over faultable user copies |
3 |
zihanx@nebusec.ai |
finished
in 5h6m0s
|
| 2026-09-20 09:31 UTC |
ipvs: avoid stack overflow from recursive connection expiration |
3 |
zihanx@nebusec.ai |
finished
in 5h25m0s
|
| 2026-09-20 07:45 UTC |
netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets |
1 |
lvjunyu@cmss.chinamobile.com |
finished
in 4h14m0s
|
| 2026-09-19 21:52 UTC |
netfilter: nf_nat: fix unsigned range_size underflow for ICMP and GRE when max < min |
1 |
benquike@gmail.com |
finished
in 4h12m0s
|
| 2026-09-19 21:52 UTC |
netfilter: nfnetlink_log: fix config error handling, SIT headroom OOB read, and nlmsg rollback |
1 |
benquike@gmail.com |
finished
in 4h4m0s
|
| 2026-09-19 03:34 UTC |
netfilter: nf_tables: defer object destruction on abort past commit_mutex |
2 |
ngocthang2710.1999@gmail.com |
finished
in 4h33m0s
|
| 2026-09-19 03:29 UTC |
netfilter: nf_tables: defer object destruction on abort past commit_mutex |
1 |
ngocthang2710.1999@gmail.com |
finished
in 4h34m0s
|
| 2026-09-18 18:31 UTC |
selftests: netfilter: nft_queue.sh: only queue icmp echo request/reply |
1 |
kuba@kernel.org |
skipped
|
| 2026-09-18 09:26 UTC |
netfilter: nf_ip6_checksum: validate checksum offset |
1 |
weir@nebusec.ai |
finished
in 4h25m0s
|
| 2026-09-18 06:18 UTC |
netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers |
5 |
running910@gmail.com |
finished
in 3h54m0s
|
| 2026-09-17 17:37 UTC |
Fix for warnings when compiling for 32bit arch |
1 |
phil@nwl.cc |
skipped
|
| 2026-09-17 17:31 UTC |
doc: nft.8: Describe nftables transactions and their limitations |
1 |
phil@nwl.cc |
skipped
|
| 2026-09-17 08:29 UTC |
net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload |
3 |
lorenzo.bianconi@oss.qualcomm.com |
finished
in 3h46m0s
|
| 2026-09-17 03:02 UTC |
ipvs: avoid stack overflow from recursive connection expiration |
2 |
zihanx@nebusec.ai |
finished
in 4h11m0s
|
| 2026-09-17 02:17 UTC |
selftests: net: update netfilter netlink config |
1 |
hangbin.liu@linux.dev |
skipped
|
| 2026-09-16 20:50 UTC |
ipvs: add per-service secure_tcp |
3 |
adrianox@gmail.com |
finished
in 4h19m0s
|
| 2026-09-16 07:36 UTC |
netfilter: nf_dup_netdev: Fix net_device reference leak in nft_fwd_dup_netdev_offload() |
1 |
vulab@iscas.ac.cn |
finished
in 4h51m0s
|
| 2026-09-14 11:51 UTC |
netfilter: nf_tables: skip expired catchall elements on insert and delete |
3 |
ljp1205831794@gmail.com |
finished
in 5h33m0s
|
| 2026-09-14 07:25 UTC |
flow offload teardown when layer 2 roaming |
5 |
julius@bairaktaris.de |
finished
in 4h52m0s
|
| 2026-09-13 10:42 UTC |
netfilter: flowtable: correct and advertise the vlan match |
2 |
julius@bairaktaris.de |
finished
in 4h13m0s
|
| 2026-09-12 17:31 UTC |
ipvs: bound twos scheduler destination walks |
1 |
weir@nebusec.ai |
finished
in 2h23m0s
|
| 2026-09-12 03:56 UTC |
ipvs: avoid stack overflow from recursive connection expiration |
1 |
zihanx@nebusec.ai |
finished
in 5h53m0s
|