| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-06-16 05:42 UTC | bpf: Guard conntrack opts error writes | 1 | chenyy23@mails.tsinghua.edu.cn | finished in 55m0s |
| 2026-06-15 13:38 UTC | netfilter: replace u_int*_t with kernel int types | 2 | carlos@carlosgrillet.me | finished in 1h56m0s |
| 2026-06-15 09:18 UTC | netfilter: flowtable: fix and simplify IP6IP6 tunnel handling | 2 | lorenzo@kernel.org | finished in 4h24m0s |
| 2026-06-14 05:25 UTC | netfilter: x_tables.h: fix all kernel-doc warnings | 1 | rdunlap@infradead.org | finished in 1h34m0s |
| 2026-06-13 10:27 UTC | netfilter: xt_nat: bridge nft_compat rule can trigger NULL-deref | 1 | n05ec@lzu.edu.cn | finished in 4h42m0s |
| 2026-06-11 12:52 UTC | parser_bison: Fix for bison < 3.6 | 2 | phil@nwl.cc | skipped |
| 2026-06-11 07:21 UTC | netfilter: xt_cluster: reject template conntracks in hash match | 1 | n05ec@lzu.edu.cn | finished in 4h52m0s |
| 2026-06-11 04:21 UTC | netfilter: nft_synproxy: stop bypassing the priv->info snapshot | 1 | runyu.xiao@seu.edu.cn | finished in 4h54m0s |
| 2026-06-10 11:57 UTC | profiling: Include unistd.h to avoid compiler warnings | 1 | phil@nwl.cc | skipped |
| 2026-06-10 11:57 UTC | parser_bison: Fix for bison < 3.6 | 1 | phil@nwl.cc | skipped |
| 2026-06-09 22:55 UTC | netfilter: nf_log: validate MAC header was set before dumping it | 2 | xmei5@asu.edu | finished in 4h18m0s |
| 2026-06-08 17:06 UTC | netfilter: flowtable: use pskb_may_pull() in nf_flow_ip6_tunnel_proto() | 1 | lorenzo@kernel.org | finished in 4h21m0s |
| 2026-06-08 12:33 UTC | netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() | 2 | lorenzo@kernel.org | finished in 4h19m0s |
| 2026-06-08 10:31 UTC | netfilter: nf_reject_ipv6: do not reject ICMPv6 Redirect with an ICMPv6 error | 1 | sayooj@aerlync.com | finished in 5h10m0s |
| 2026-06-08 05:43 UTC | bridge: br_netfilter: pin bridge device while NFQUEUE holds fake dst | 5 | n05ec@lzu.edu.cn | finished in 1h45m0s |
| 2026-06-08 00:11 UTC | netfilter: nf_log: validate MAC header was set before dumping it | 1 | xmei5@asu.edu | finished in 4h5m0s |
| 2026-06-07 16:44 UTC | netfilter: synproxy: fix unaligned access to TCP timestamp option | 1 | rosenp@gmail.com | finished in 4h24m0s |
| 2026-06-06 06:50 UTC | bridge: br_netfilter: pin bridge device while NFQUEUE holds fake dst | 4 | n05ec@lzu.edu.cn | finished in 1h1m0s |
| 2026-06-05 16:47 UTC | netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() | 1 | lorenzo@kernel.org | finished in 4h19m0s |
| 2026-06-04 17:32 UTC | bridge: br_netfilter: pin bridge device while NFQUEUE holds fake dst | 3 | n05ec@lzu.edu.cn | finished in 4h20m0s |
| 2026-06-04 17:10 UTC | netfilter: nf_flow_table: separate tunnel route state from direct xmit | 1 | n05ec@lzu.edu.cn | finished in 4h27m0s |
| 2026-06-03 19:29 UTC | Eliminate variable declarations in switch cases | 1 | phil@nwl.cc | skipped |
| 2026-06-03 18:47 UTC | intervals: Fix for inconsistent union field use | 1 | phil@nwl.cc | skipped |
| 2026-06-03 07:38 UTC | netfilter: nf_conntrack: destroy stale expectfn expectations on unregister | 1 | bestswngs@gmail.com | finished in 4h25m0s |
| 2026-06-03 02:50 UTC | netfilter: flowtable: remove inline segmentation | 1 | qingfang.deng@linux.dev | finished in 3h59m0s |
| 2026-06-02 13:07 UTC | tests: shell: packetpath/ct_count: Add missing socat feature test | 1 | phil@nwl.cc | skipped |
| 2026-05-31 15:50 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 3 | lorenzo@kernel.org | finished in 3h56m0s |
| 2026-05-28 22:34 UTC | netfilter: TCPMSS: fix dropped packets when MSS option is unaligned | 2 | kacper.kokot.44@gmail.com | finished in 1h16m0s |
| 2026-05-28 07:21 UTC | netfilter: ipvs: fix ct refcount leak when template is invalid | 1 | vulab@iscas.ac.cn |
finished
in 4h49m0s
[1 findings] |
| 2026-05-28 07:08 UTC | netfilter: flowtable: fix offloaded ct timeout never being extended | 2 | adibente@gmail.com | finished in 4h28m0s |
| 2026-05-27 13:57 UTC | netfilter: nft_tunnel: fix use-after-free on object destroy | 1 | tristmd@gmail.com | finished in 1h43m0s |
| 2026-05-27 08:18 UTC | ipvs: Replace use of system_unbound_wq with system_dfl_long_wq | 3 | marco.crivellari@suse.com | finished in 1h24m0s |
| 2026-05-26 06:01 UTC | netfilter: flowtable: fix offloaded ct timeout never being extended | 1 | adibente@gmail.com | finished in 4h2m0s |
| 2026-05-26 03:21 UTC | bridge: br_netfilter: move fake rtable off struct net_bridge | 2 | n05ec@lzu.edu.cn | finished in 4h9m0s |
| 2026-05-25 21:58 UTC | netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() | 1 | rosenp@gmail.com | finished in 3h56m0s |
| 2026-05-25 20:11 UTC | netfilter: TCPMSS: fix dropped packets when MSS option is unaligned | 1 | kacper.kokot.44@gmail.com | finished in 4h9m0s |
| 2026-05-25 16:24 UTC | netfilter: flowtable: resolve LAG slave for direct HW offload | 1 | hurryman2212@gmail.com | finished in 4h45m0s |
| 2026-05-25 15:35 UTC | netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures | 1 | fmancera@suse.de | finished in 1h3m0s |
| 2026-05-23 15:26 UTC | netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag | 1 | devnexen@gmail.com | finished in 1h42m0s |
| 2026-05-22 10:47 UTC | netfilter: xt_NFQUEUE: prefer raw_smp_processor_id | 1 | fmancera@suse.de | finished in 4h26m0s |
| 2026-05-20 02:34 UTC | netfilter: nft_fib_ipv6: handle routes via external nexthop | 2 | jiayuan.chen@linux.dev | finished in 4h25m0s |
| 2026-05-19 21:23 UTC | netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read | 1 | meatuni001@gmail.com | finished in 1h40m0s |
| 2026-05-19 04:14 UTC | netfilter: nft_fib_ipv6: handle routes via external nexthop | 1 | jiayuan.chen@linux.dev | finished in 4h10m0s |
| 2026-05-19 01:55 UTC | ipvs: Use flexible array for MH lookup table | 1 | rosenp@gmail.com | finished in 2h4m0s |
| 2026-05-17 14:50 UTC | netfilter: ipset: preserve comment lifetime across resize and gc expiry | 2 | n05ec@lzu.edu.cn | finished in 4h9m0s |
| 2026-05-17 11:37 UTC | netfilter: nf_dup: preserve socket ownership on egress duplicates | 1 | n05ec@lzu.edu.cn | finished in 2h18m0s |
| 2026-05-16 15:23 UTC | netfilter: disable payload mangling in userns | 1 | tpluszz77@gmail.com | finished in 4h1m0s |
| 2026-05-15 13:51 UTC | net: Replace system_unbound_wq with system_dfl_wq | 2 | marco.crivellari@suse.com | finished in 1h59m0s |
| 2026-05-15 03:19 UTC | netfilter: nf_queue: hold bridge skb->dev while queued | 2 | n05ec@lzu.edu.cn | finished in 4h18m0s |
| 2026-05-14 14:46 UTC | net: neigh: Reallocate headroom if necessary in neigh_hh_bridge() | 4 | lorenzo@kernel.org | finished in 4h32m0s |
| 2026-05-14 14:16 UTC | netfilter: nf_conncount: prevent connlimit drops for early confirmed ct | 2 | fmancera@suse.de | finished in 4h24m0s |
| 2026-05-14 04:05 UTC | netfilter: xt_IDLETIMER: scope timer reuse to the owning netns | 1 | n05ec@lzu.edu.cn | finished in 4h29m0s |
| 2026-05-14 03:48 UTC | bridge: br_netfilter: give fake rtable its own lifetime | 1 | n05ec@lzu.edu.cn | finished in 4h38m0s |
| 2026-05-13 16:40 UTC | net: neigh: Reallocate headroom if necessary in neigh_hh_bridge() | 3 | lorenzo@kernel.org | finished in 4h30m0s |
| 2026-05-13 12:15 UTC | netfilter: nf_conncount: prevent connlimit drops for early confirmed ct | 1 | fmancera@suse.de | finished in 4h33m0s |
| 2026-05-13 07:57 UTC | netfilter: ip6t_hbh: reject oversized option lists | 1 | n05ec@lzu.edu.cn | finished in 4h58m0s |
| 2026-05-13 05:54 UTC | netfilter: ipset: fix comment extension lifetime during hash resize | 1 | n05ec@lzu.edu.cn | finished in 4h52m0s |
| 2026-05-12 21:55 UTC | netfilter: nf_conntrack_proto_tcp: fix typos in comments | 1 | avinash.duduskar@gmail.com | finished in 1h32m0s |
| 2026-05-12 10:34 UTC | selftests: netfilter: Add bridge_fastpath.sh | 5 | ericwouds@gmail.com | finished in 2h9m0s |
| 2026-05-12 10:33 UTC | conntrack: bridge: add double vlan, pppoe and pppoe-in-q | 20 | ericwouds@gmail.com | finished in 4h38m0s |
| 2026-05-12 07:57 UTC | netfilter: nf_queue: hold bridge skb->dev while queued | 1 | n05ec@lzu.edu.cn | finished in 4h33m0s |
| 2026-05-11 17:30 UTC | netfilter: nft_inner: Fix IPv6 inner_thoff desync | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h16m0s |
| 2026-05-11 15:57 UTC | net: neigh: Reallocate headroom if necessary in neigh_hh_bridge() | 2 | lorenzo@kernel.org | finished in 4h27m0s |
| 2026-05-11 14:43 UTC | netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check | 1 | hamzamahfooz@linux.microsoft.com | finished in 4h42m0s |
| 2026-05-11 14:37 UTC | netfilter: nf_tables: fix dst corruption in same register operation | 4 | fmancera@suse.de | finished in 4h44m0s |
| 2026-05-11 13:47 UTC | net: Replace system_unbound_wq with system_dfl_wq | 1 | marco.crivellari@suse.com | finished in 1h51m0s |
| 2026-05-11 13:37 UTC | netfilter: nft_inner: Fix IPv6 inner_thoff desync | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h48m0s |
| 2026-05-10 13:19 UTC | netfilter: nft_inner: Fix IPv6 inner_thoff desync | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h8m0s |
| 2026-05-08 11:25 UTC | net: neigh: Reallocate headroom if necessary in neigh_hh_bridge() | 1 | lorenzo@kernel.org | finished in 4h2m0s |
| 2026-05-08 11:15 UTC | scanner: Accept all statements' first words in all scopes | 2 | phil@nwl.cc | skipped |
| 2026-05-07 20:38 UTC | scanner: Accept all statements' first words in all scopes | 1 | phil@nwl.cc | skipped |
| 2026-05-07 13:44 UTC | netfilter: fix expectation reference leaks | 2 | lixiasong1@huawei.com | finished in 5h8m0s |
| 2026-05-06 17:27 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 2 | lorenzo@kernel.org | finished in 4h33m0s |
| 2026-05-06 12:06 UTC | netfilter: fix nf_ct_expect_alloc() reference leaks | 1 | lixiasong1@huawei.com | finished in 4h43m0s |
| 2026-05-05 14:49 UTC | Add IPv4 over IPv6 flowtable SW acceleration | 1 | lorenzo@kernel.org | finished in 4h59m0s |
| 2026-05-05 10:37 UTC | scanner: enable verdicts in rate scope too | 1 | fw@strlen.de | skipped |
| 2026-05-05 05:11 UTC | netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump | 1 | pratham36gupta@gmail.com | finished in 4h14m0s |
| 2026-05-03 08:32 UTC | netfilter: conntrack: shared port parser for helpers | 3 | rc@rexion.ai | finished in 4h23m0s |
| 2026-05-01 06:31 UTC | netfilter: conntrack: add shared port parser and use it in IRC and Amanda helpers | 2 | rc@rexion.ai | finished in 4h53m0s |
| 2026-04-30 18:25 UTC | netfilter: conntrack: add shared port parser and use it in IRC and Amanda helpers | 2 | rc@rexion.ai | finished in 5h40m0s |
| 2026-04-29 23:19 UTC | netfilter: fix NULL ops dereference in iptable lazy init | 2 | tristmd@gmail.com | finished in 4h50m0s |
| 2026-04-29 17:56 UTC | netfilter: fix NULL ops race in iptable lazy init | 1 | tristmd@gmail.com | finished in 5h17m0s |
| 2026-04-29 14:24 UTC | netfilter: flowtable_offload: propagate CT mark to hardware offload path | 1 | lorenzo@kernel.org | finished in 4h27m0s |
| 2026-04-27 09:21 UTC | netfilter: nft_bitwise: fix dst corruption in same register shifts | 4 | fmancera@suse.de | finished in 4h40m0s |
| 2026-04-26 14:46 UTC | sctp: fix a vtag verification failure caused by stale INITs | 2 | lucien.xin@gmail.com | finished in 4h28m0s |
| 2026-04-24 09:23 UTC | netfilter: ebtables: fix OOB read in compat_mtw_from_user | 1 | n05ec@lzu.edu.cn | finished in 4h49m0s |
| 2026-04-23 15:54 UTC | netfilter: nft_bitwise: fix dst corruption in same register shifts | 3 | fmancera@suse.de | finished in 4h24m0s |
| 2026-04-23 12:05 UTC | netfilter: nft_bitwise: fix dst corruption in same register shifts | 2 | fmancera@suse.de | finished in 4h13m0s |
| 2026-04-22 15:41 UTC | netfilter: ipset: keep comment extensions private on resize | 1 | n05ec@lzu.edu.cn | finished in 4h29m0s |
| 2026-04-22 14:54 UTC | netfilter: reject zero shift in nft_bitwise | 2 | n05ec@lzu.edu.cn | finished in 4h31m0s |
| 2026-04-21 17:38 UTC | netfilter: nft_bitwise: fix dst corruption in same register shifts | 1 | fmancera@suse.de | finished in 4h27m0s |
| 2026-04-21 15:59 UTC | expr: add support to math expression | 4 | fmancera@suse.de | skipped |
| 2026-04-21 15:59 UTC | netfilter: nf_tables: add math expression support | 5 | fmancera@suse.de | finished in 1h29m0s |
| 2026-04-20 17:06 UTC | expr: add support to math expression | 3 | fmancera@suse.de | skipped |
| 2026-04-20 17:05 UTC | netfilter: nf_tables: add math expression support | 4 | fmancera@suse.de | finished in 1h37m0s |
| 2026-04-20 13:39 UTC | netfilter: flowtable_offload: propagate CT mark to hardware offload path | 1 | lorenzo@kernel.org | finished in 4h0m0s |
| 2026-04-18 19:58 UTC | selftests: netfilter: conntrack_sctp_collision.sh: Introduce SCTP INIT collision test | 2 | yiche.cy@gmail.com | finished in 1h4m0s |
| 2026-04-18 16:30 UTC | netfilter: xt_TCPMSS: check skb_dst before path-MTU clamping | 1 | bestswngs@gmail.com | finished in 4h27m0s |
| 2026-04-17 12:25 UTC | netfilter: xt_policy: fix strict mode inbound policy matching | 1 | n05ec@lzu.edu.cn | finished in 4h9m0s |
| 2026-04-16 01:04 UTC | selftests: net: add missing CMAC to tcp_ao config | 1 | kuba@kernel.org | finished in 1h18m0s |