| 2026-05-01 06:31 UTC |
netfilter: conntrack: add shared port parser and use it in IRC and Amanda helpers |
2 |
rc@rexion.ai |
finished
in 4h53m0s
|
| 2026-04-30 18:25 UTC |
netfilter: conntrack: add shared port parser and use it in IRC and Amanda helpers |
2 |
rc@rexion.ai |
finished
in 5h40m0s
|
| 2026-04-29 23:19 UTC |
netfilter: fix NULL ops dereference in iptable lazy init |
2 |
tristmd@gmail.com |
finished
in 4h50m0s
|
| 2026-04-29 17:56 UTC |
netfilter: fix NULL ops race in iptable lazy init |
1 |
tristmd@gmail.com |
finished
in 5h17m0s
|
| 2026-04-29 14:24 UTC |
netfilter: flowtable_offload: propagate CT mark to hardware offload path |
1 |
lorenzo@kernel.org |
finished
in 4h27m0s
|
| 2026-04-27 09:21 UTC |
netfilter: nft_bitwise: fix dst corruption in same register shifts |
4 |
fmancera@suse.de |
finished
in 4h40m0s
|
| 2026-04-26 14:46 UTC |
sctp: fix a vtag verification failure caused by stale INITs |
2 |
lucien.xin@gmail.com |
finished
in 4h28m0s
|
| 2026-04-24 09:23 UTC |
netfilter: ebtables: fix OOB read in compat_mtw_from_user |
1 |
n05ec@lzu.edu.cn |
finished
in 4h49m0s
|
| 2026-04-23 15:54 UTC |
netfilter: nft_bitwise: fix dst corruption in same register shifts |
3 |
fmancera@suse.de |
finished
in 4h24m0s
|
| 2026-04-23 12:05 UTC |
netfilter: nft_bitwise: fix dst corruption in same register shifts |
2 |
fmancera@suse.de |
finished
in 4h13m0s
|
| 2026-04-22 15:41 UTC |
netfilter: ipset: keep comment extensions private on resize |
1 |
n05ec@lzu.edu.cn |
finished
in 4h29m0s
|
| 2026-04-22 14:54 UTC |
netfilter: reject zero shift in nft_bitwise |
2 |
n05ec@lzu.edu.cn |
finished
in 4h31m0s
|
| 2026-04-21 17:38 UTC |
netfilter: nft_bitwise: fix dst corruption in same register shifts |
1 |
fmancera@suse.de |
finished
in 4h27m0s
|
| 2026-04-21 15:59 UTC |
expr: add support to math expression |
4 |
fmancera@suse.de |
skipped
|
| 2026-04-21 15:59 UTC |
netfilter: nf_tables: add math expression support |
5 |
fmancera@suse.de |
finished
in 1h29m0s
|
| 2026-04-20 17:06 UTC |
expr: add support to math expression |
3 |
fmancera@suse.de |
skipped
|
| 2026-04-20 17:05 UTC |
netfilter: nf_tables: add math expression support |
4 |
fmancera@suse.de |
finished
in 1h37m0s
|
| 2026-04-20 13:39 UTC |
netfilter: flowtable_offload: propagate CT mark to hardware offload path |
1 |
lorenzo@kernel.org |
finished
in 4h0m0s
|
| 2026-04-18 19:58 UTC |
selftests: netfilter: conntrack_sctp_collision.sh: Introduce SCTP INIT collision test |
2 |
yiche.cy@gmail.com |
finished
in 1h4m0s
|
| 2026-04-18 16:30 UTC |
netfilter: xt_TCPMSS: check skb_dst before path-MTU clamping |
1 |
bestswngs@gmail.com |
finished
in 4h27m0s
|
| 2026-04-17 12:25 UTC |
netfilter: xt_policy: fix strict mode inbound policy matching |
1 |
n05ec@lzu.edu.cn |
finished
in 4h9m0s
|
| 2026-04-16 01:04 UTC |
selftests: net: add missing CMAC to tcp_ao config |
1 |
kuba@kernel.org |
finished
in 1h18m0s
|
| 2026-04-15 14:40 UTC |
ipvs: fix MTU check for GSO packets in tunnel mode |
4 |
342144303@qq.com |
finished
in 4h41m0s
|
| 2026-04-15 03:43 UTC |
netfilter: xt_realm: fix null-ptr-deref in realm_mt() |
1 |
hxzene@gmail.com |
finished
in 2h9m0s
|
| 2026-04-14 22:14 UTC |
netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO |
2 |
xmei5@asu.edu |
finished
in 4h39m0s
|
| 2026-04-14 11:21 UTC |
netfilter: nf_flow_table_ip: Introduce nf_flow_vlan_push() |
2 |
ericwouds@gmail.com |
finished
in 4h17m0s
|
| 2026-04-14 10:49 UTC |
netfilter: nfnetlink_osf: fix null-ptr-deref in nf_osf_ttl |
2 |
hxzene@gmail.com |
finished
in 4h41m0s
|
| 2026-04-14 07:45 UTC |
netfilter: nfnetlink_osf: fix null-ptr-deref in nf_osf_ttl |
1 |
hxzene@gmail.com |
finished
in 5h2m0s
|
| 2026-04-13 12:37 UTC |
netfilter: nf_conncount: make number of hash slots configurable |
1 |
deliran@verdict.gg |
finished
in 1h0m0s
|
| 2026-04-12 22:28 UTC |
netfilter: nft_set_rbtree: fix use count leak on transaction abort |
3 |
marko.jevtic@codereflect.io |
finished
in 4h17m0s
|
| 2026-04-11 18:57 UTC |
netfilter: nfnl_cthelper: apply per-class values when updating policies |
1 |
devnexen@gmail.com |
finished
in 4h5m0s
|
| 2026-04-10 20:48 UTC |
netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO |
1 |
xmei5@asu.edu |
finished
in 4h5m0s
|
| 2026-04-10 10:13 UTC |
netfilter: nf_tables: use RCU-safe list primitives for basechain hook list |
1 |
bestswngs@gmail.com |
finished
in 4h27m0s
|
| 2026-04-09 22:34 UTC |
[next] netfilter: x_tables: Avoid a couple -Wflex-array-member-not-at-end warnings |
3 |
gustavoars@kernel.org |
finished
in 4h31m0s
|
| 2026-04-09 20:28 UTC |
[next] netfilter: x_tables: Avoid a couple -Wflex-array-member-not-at-end warnings |
2 |
gustavoars@kernel.org |
finished
in 4h11m0s
|
| 2026-04-09 13:07 UTC |
improve hw flow offload byte accounting |
1 |
daniel@makrotopia.org |
finished
in 1h1m0s
[1 findings]
|
| 2026-04-09 10:49 UTC |
netfilter: nft_fwd_netdev: use recursion counter in neigh egress path |
2 |
bestswngs@gmail.com |
finished
in 4h38m0s
|
| 2026-04-09 09:50 UTC |
netfilter: nf_conntrack_sip: fix OOB read in epaddr_len and ct_sip_parse_header_uri |
1 |
bestswngs@gmail.com |
finished
in 2h32m0s
|
| 2026-04-09 05:36 UTC |
netfilter: nft_fwd_netdev: use recursion counter in neigh egress path |
1 |
bestswngs@gmail.com |
finished
in 4h22m0s
|
| 2026-04-08 21:27 UTC |
[next] netfilter: x_tables: Avoid a couple -Wflex-array-member-not-at-end warnings |
1 |
gustavoars@kernel.org |
finished
in 4h52m0s
|
| 2026-04-08 11:59 UTC |
support for several list and reset commands |
1 |
pablo@netfilter.org |
skipped
|
| 2026-04-08 07:35 UTC |
netfilter: arp_tables: fix IEEE1394 ARP payload parsing in arp_packet_match() |
1 |
bestswngs@gmail.com |
finished
in 4h30m0s
|
| 2026-04-06 21:18 UTC |
selftests: nft_queue.sh: add a parallel stress test |
1 |
fmancera@suse.de |
finished
in 1h6m0s
|
| 2026-04-03 15:52 UTC |
netfilter: xt_multiport: validate range encoding in checkentry |
4 |
n05ec@lzu.edu.cn |
finished
in 4h20m0s
|
| 2026-04-02 18:43 UTC |
A bit of non-constant binop follow-up |
1 |
phil@nwl.cc |
skipped
|
| 2026-04-02 18:21 UTC |
netfilter: xt_multiport: validate range encoding in checkentry |
3 |
n05ec@lzu.edu.cn |
finished
in 4h34m0s
|
| 2026-04-02 17:34 UTC |
netfilter: xt_multiport: validate range encoding in checkentry |
2 |
n05ec@lzu.edu.cn |
finished
in 4h18m0s
|
| 2026-04-02 14:52 UTC |
arptables: Warn when ignoring '-p' option |
1 |
phil@nwl.cc |
skipped
|
| 2026-04-02 14:46 UTC |
ipvs: fix MTU check for GSO packets in tunnel mode |
3 |
342144303@qq.com |
finished
in 4h21m0s
|
| 2026-04-02 12:09 UTC |
ipvs: fix MTU check for GSO packets in tunnel mode |
2 |
342144303@qq.com |
finished
in 1h15m0s
[1 findings]
|
| 2026-04-01 21:20 UTC |
netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator |
2 |
xmei5@asu.edu |
finished
in 4h16m0s
|
| 2026-04-01 19:57 UTC |
netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator |
1 |
xmei5@asu.edu |
finished
in 4h28m0s
|
| 2026-04-01 15:38 UTC |
ipvs: fix MTU check for GSO packets in tunnel mode |
1 |
342144303@qq.com |
finished
in 4h32m0s
|
| 2026-04-01 07:58 UTC |
ipvs: fix NULL deref in ip_vs_add_service error path |
2 |
bestswngs@gmail.com |
finished
in 4h54m0s
|
| 2026-04-01 07:44 UTC |
Deprecate Legacy IP |
1 |
dwmw2@infradead.org |
finished
in 3h0m0s
[1 findings]
|
| 2026-04-01 04:16 UTC |
ipvs: fix NULL deref in ip_vs_add_service error path |
1 |
bestswngs@gmail.com |
finished
in 4h32m0s
|
| 2026-03-31 07:34 UTC |
netfilter: ip6t_eui64: validate MAC header before using it |
1 |
n05ec@lzu.edu.cn |
finished
in 2h38m0s
|
| 2026-03-31 06:17 UTC |
netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent |
2 |
tpluszz77@gmail.com |
finished
in 4h8m0s
|
| 2026-03-31 06:14 UTC |
netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent |
2 |
tpluszz77@gmail.com |
finished
in 4h16m0s
|
| 2026-03-30 21:39 UTC |
netfilter: ipset: drop logically empty buckets in mtype_del |
1 |
yuantan098@gmail.com |
finished
in 4h20m0s
|
| 2026-03-30 11:35 UTC |
selftests: netfilter: conntrack_sctp_collision.sh: Introduce SCTP INIT collision test |
1 |
yiche@redhat.com |
finished
in 1h20m0s
|
| 2026-03-29 16:52 UTC |
netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent |
1 |
tpluszz77@gmail.com |
finished
in 4h21m0s
|
| 2026-03-29 16:51 UTC |
netfilter: ctnetlink: validate expect class against master helper |
1 |
tpluszz77@gmail.com |
finished
in 4h15m0s
|
| 2026-03-29 16:50 UTC |
netfilter: nf_conntrack_helper: pass helper to expect cleanup |
1 |
tpluszz77@gmail.com |
finished
in 4h27m0s
|
| 2026-03-28 14:51 UTC |
netfilter: xt_multiport: reject trailing range markers |
2 |
n05ec@lzu.edu.cn |
finished
in 4h8m0s
|
| 2026-03-26 20:18 UTC |
netfilter: nf_conntrack_h323: Correct indentation when H323_TRACE defined |
1 |
david.laight.linux@gmail.com |
finished
in 1h22m0s
|
| 2026-03-26 14:42 UTC |
netfilter: Kconfig: make NF_FLOW_TABLE_INET depend on NF_TABLES_INET |
1 |
fmancera@suse.de |
finished
in 1h57m0s
|
| 2026-03-24 17:12 UTC |
netfilter: ctnetlink: use netlink policy range checks |
1 |
devnexen@gmail.com |
finished
in 4h20m0s
|
| 2026-03-24 16:30 UTC |
netfilter: conntrack: clamp TCP window scale to TCP_MAX_WSCALE via ctnetlink |
1 |
devnexen@gmail.com |
finished
in 4h25m0s
|
| 2026-03-24 15:18 UTC |
ipvs: Fix incorrect use of HK_TYPE_KTHREAD housekeeping cpumask |
1 |
longman@redhat.com |
finished
in 4h34m0s
|
| 2026-03-23 08:07 UTC |
netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp |
1 |
bestswngs@gmail.com |
finished
in 2h1m0s
|
| 2026-03-20 15:19 UTC |
netfilter: nfnetlink_hook: Dump nat type chains |
2 |
phil@nwl.cc |
finished
in 4h26m0s
|
| 2026-03-20 15:16 UTC |
mnl: Fix ordering of hooks in 'list hooks' output |
1 |
phil@nwl.cc |
skipped
|
| 2026-03-19 13:32 UTC |
parser: Support table spec in 'list chains' command |
1 |
phil@nwl.cc |
skipped
|
| 2026-03-19 13:32 UTC |
segtree: Fix for variable-sized object may not be initialized |
1 |
phil@nwl.cc |
skipped
|
| 2026-03-19 09:06 UTC |
set{,_elem}: Drop nftnl_set{,_elem}_clone() |
1 |
phil@nwl.cc |
skipped
|
| 2026-03-17 14:00 UTC |
ipvs: Move defense_work to system_dfl_long_wq |
1 |
iluceno@suse.de |
finished
in 1h11m0s
[1 findings]
|
| 2026-03-17 10:17 UTC |
bridge: Introduce DEV_PATH_BR_VLAN_KEEP_HW |
12 |
ericwouds@gmail.com |
skipped
|
| 2026-03-17 10:15 UTC |
netfilter: nft_flow_offload: Add DEV_PATH_MTK_WDMA to nft_dev_path_info() |
12 |
ericwouds@gmail.com |
finished
in 2h3m0s
|
| 2026-03-15 17:06 UTC |
netfilter: add missing kernel-doc parameters for nf_hook() |
2 |
xaum.io@gmail.com |
finished
in 4h30m0s
|
| 2026-03-13 18:01 UTC |
netfilter: ipset: harden payload calculation in call_ad() |
1 |
davidbaum461@gmail.com |
finished
in 4h25m0s
|
| 2026-03-13 15:32 UTC |
netfilter: nfnetlink_hook: Dump nat type chains |
1 |
phil@nwl.cc |
finished
in 4h14m0s
|
| 2026-03-13 10:44 UTC |
Revert "tests: py: use `os.unshare` Python function" |
1 |
phil@nwl.cc |
skipped
|
| 2026-03-12 22:31 UTC |
netfilter: conntrack: expose gc_scan_interval_max via sysctl |
2 |
panchamukhi@arista.com |
finished
in 4h12m0s
|
| 2026-03-11 19:40 UTC |
netfilter: conntrack: expose gc_scan_interval_max via sysctl |
1 |
panchamukhi@arista.com |
finished
in 4h4m0s
|
| 2026-03-11 19:33 UTC |
cache: Fix for multiple commands in a single batch |
1 |
phil@nwl.cc |
skipped
|
| 2026-03-10 23:11 UTC |
Enhance cache filter for list commands |
1 |
phil@nwl.cc |
skipped
|
| 2026-03-10 17:18 UTC |
xtables-translate: Return non-zero if translation fails |
1 |
phil@nwl.cc |
skipped
|
| 2026-03-10 14:39 UTC |
netfilter: nf_flow_table_ip: reset mac header before vlan push |
1 |
ericwouds@gmail.com |
finished
in 4h12m0s
|
| 2026-03-09 20:29 UTC |
netfilter: nf_tables: Fix typo in enum description |
1 |
jelle@vdwaa.nl |
finished
in 1h3m0s
|
| 2026-03-07 17:24 UTC |
netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path |
1 |
imv4bel@gmail.com |
finished
in 3h58m0s
|
| 2026-03-07 17:23 UTC |
netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() |
1 |
imv4bel@gmail.com |
finished
in 4h4m0s
|
| 2026-03-07 17:23 UTC |
netfilter: nf_flow_table_offload: fix heap overflow in flow_action_entry_next() |
1 |
imv4bel@gmail.com |
finished
in 4h7m0s
|
| 2026-03-07 17:22 UTC |
netfilter: nf_conntrack_sctp: validate state value in nlattr_to_sctp() |
1 |
imv4bel@gmail.com |
finished
in 4h13m0s
|
| 2026-03-07 17:22 UTC |
netfilter: ctnetlink: validate CTA_EXPECT_NAT_DIR to prevent OOB access |
1 |
imv4bel@gmail.com |
finished
in 3h56m0s
|
| 2026-03-07 17:21 UTC |
netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() |
1 |
imv4bel@gmail.com |
finished
in 3h59m0s
|
| 2026-03-07 17:21 UTC |
netfilter: ctnetlink: fix use-after-free of exp->master in single expectation GET |
1 |
imv4bel@gmail.com |
finished
in 4h8m0s
|
| 2026-03-07 17:20 UTC |
netfilter: ctnetlink: fix use-after-free of exp->master in expectation dump |
1 |
imv4bel@gmail.com |
finished
in 4h4m0s
|
| 2026-03-05 12:01 UTC |
netfilter: nf_tables: Fix for duplicate device in netdev hooks |
1 |
phil@nwl.cc |
finished
in 4h13m0s
|
| 2026-03-05 11:15 UTC |
include: linux: nf_tables.h: Sync with current kernel UAPI headers |
1 |
phil@nwl.cc |
skipped
|