Advanced Filters
Published Title Version Author Status
2026-09-27 04:31 UTC netfilter: x_tables: avoid holding mutex over faultable user copies 4 zihanx@nebusec.ai finished in 4h6m0s
2026-09-26 20:45 UTC netfilter: ip6t_SYNPROXY: check TCP header before verifying checksum 1 raghunathpalla.0209@gmail.com finished in 3h49m0s
2026-09-26 17:52 UTC netfilter: conntrack: wait for RCU readers before freeing the hash 1 nicoyip.dev@gmail.com finished in 4h7m0s
2026-09-26 17:51 UTC ipvs: Defer application parent freeing until after RCU readers 1 nicoyip.dev@gmail.com finished in 4h2m0s
2026-09-26 09:19 UTC netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns 4 zihanx@nebusec.ai finished in 3h59m0s
2026-09-25 19:36 UTC ipvs: wait grace period while reusing dest from trash 2 weir@nebusec.ai finished in 3h56m0s
2026-09-25 16:40 UTC ipvs: avoid stack overflow from recursive connection expiration 5 zihanx@nebusec.ai finished in 3h58m0s
2026-09-25 14:11 UTC ipvs: fix OOB write when NATing ICMPv6 errors quoting non-first fragments 1 axel.mierczuk@1password.com finished in 4h19m0s
2026-09-25 14:11 UTC ipvs: keep templates and cport 0 conns away from packet lookups 1 axel.mierczuk@1password.com finished in 4h0m0s
2026-09-25 13:51 UTC expr: add support to math expression 5 fmancera@suse.de skipped
2026-09-25 13:49 UTC netfilter: nf_tables: add math expression support 6 fmancera@suse.de finished in 2h24m0s
2026-09-24 20:25 UTC netfilter: nf_flow_table_bpf: populate VLAN encap in XDP flowtable lookup 1 adrianox@gmail.com finished in 3h18m0s
2026-09-24 20:13 UTC netfilter: nft_reject: prevent unbounded recursion in output hooks 3 fmancera@suse.de finished in 4h0m0s
2026-09-23 09:54 UTC ipvs: avoid stack overflow from recursive connection expiration 4 zihanx@nebusec.ai finished in 4h18m0s
2026-09-23 04:23 UTC netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode 1 subhampal789@gmail.com skipped
2026-09-22 19:18 UTC netfilter: bpf: reject invalid NAT manipulation types 1 fmancera@suse.de finished in 4h4m0s
2026-09-22 17:39 UTC netfilter: ecache: bound destroy event redelivery 1 weir@nebusec.ai finished in 3h46m0s
2026-09-22 16:40 UTC netfilter: nft_nat: use the right enum members for nat type switch 1 fmancera@suse.de finished in 1h3m0s
2026-09-22 09:52 UTC netfilter: nf_dup: disable duplication in user namespaces 3 zihanx@nebusec.ai finished in 5h23m0s
2026-09-22 09:25 UTC netfilter: nft_reject: prevent unbounded recursion in output hooks 2 fmancera@suse.de finished in 4h33m0s
2026-09-22 09:08 UTC ipvs: skip committing sync_threshold when proc_dointvec fails 1 joel.granados@kernel.org finished in 4h0m0s
2026-09-22 06:23 UTC netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets 3 lvjunyu@cmss.chinamobile.com finished in 4h29m0s
2026-09-22 03:03 UTC net: prevent partial checksums from modifying network headers 6 habte.yibelo@gmail.com finished in 4h2m0s
2026-09-21 22:29 UTC netfilter: nft_reject: prevent unbounded recursion in output hooks 1 fmancera@suse.de finished in 4h3m0s
2026-09-21 14:55 UTC ovs, net/sched: fixes for UAF after conntrack extension realloc 1 i.maximets@ovn.org finished in 4h24m0s
2026-09-21 13:03 UTC netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets 2 lvjunyu@cmss.chinamobile.com finished in 4h1m0s
2026-09-21 02:53 UTC net: prevent partial checksums from modifying network headers 5 habte.yibelo@gmail.com finished in 3h47m0s
2026-09-21 02:08 UTC netfilter: nft_set_rbtree: skip transaction elements during GC 1 bestswngs@gmail.com finished in 4h20m0s
2026-09-20 11:58 UTC netfilter: x_tables: avoid holding mutex over faultable user copies 3 zihanx@nebusec.ai finished in 5h6m0s
2026-09-20 09:31 UTC ipvs: avoid stack overflow from recursive connection expiration 3 zihanx@nebusec.ai finished in 5h25m0s
2026-09-20 07:45 UTC netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets 1 lvjunyu@cmss.chinamobile.com finished in 4h14m0s
2026-09-19 21:52 UTC netfilter: nf_nat: fix unsigned range_size underflow for ICMP and GRE when max < min 1 benquike@gmail.com finished in 4h12m0s
2026-09-19 21:52 UTC netfilter: nfnetlink_log: fix config error handling, SIT headroom OOB read, and nlmsg rollback 1 benquike@gmail.com finished in 4h4m0s
2026-09-19 03:34 UTC netfilter: nf_tables: defer object destruction on abort past commit_mutex 2 ngocthang2710.1999@gmail.com finished in 4h33m0s
2026-09-19 03:29 UTC netfilter: nf_tables: defer object destruction on abort past commit_mutex 1 ngocthang2710.1999@gmail.com finished in 4h34m0s
2026-09-18 18:31 UTC selftests: netfilter: nft_queue.sh: only queue icmp echo request/reply 1 kuba@kernel.org skipped
2026-09-18 09:26 UTC netfilter: nf_ip6_checksum: validate checksum offset 1 weir@nebusec.ai finished in 4h25m0s
2026-09-18 06:18 UTC netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers 5 running910@gmail.com finished in 3h54m0s
2026-09-17 17:37 UTC Fix for warnings when compiling for 32bit arch 1 phil@nwl.cc skipped
2026-09-17 17:31 UTC doc: nft.8: Describe nftables transactions and their limitations 1 phil@nwl.cc skipped
2026-09-17 08:29 UTC net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload 3 lorenzo.bianconi@oss.qualcomm.com finished in 3h46m0s
2026-09-17 03:02 UTC ipvs: avoid stack overflow from recursive connection expiration 2 zihanx@nebusec.ai finished in 4h11m0s
2026-09-17 02:17 UTC selftests: net: update netfilter netlink config 1 hangbin.liu@linux.dev skipped
2026-09-16 20:50 UTC ipvs: add per-service secure_tcp 3 adrianox@gmail.com finished in 4h19m0s
2026-09-16 07:36 UTC netfilter: nf_dup_netdev: Fix net_device reference leak in nft_fwd_dup_netdev_offload() 1 vulab@iscas.ac.cn finished in 4h51m0s
2026-09-14 11:51 UTC netfilter: nf_tables: skip expired catchall elements on insert and delete 3 ljp1205831794@gmail.com finished in 5h33m0s
2026-09-14 07:25 UTC flow offload teardown when layer 2 roaming 5 julius@bairaktaris.de finished in 4h52m0s
2026-09-13 10:42 UTC netfilter: flowtable: correct and advertise the vlan match 2 julius@bairaktaris.de finished in 4h13m0s
2026-09-12 17:31 UTC ipvs: bound twos scheduler destination walks 1 weir@nebusec.ai finished in 2h23m0s
2026-09-12 03:56 UTC ipvs: avoid stack overflow from recursive connection expiration 1 zihanx@nebusec.ai finished in 5h53m0s
2026-09-12 01:32 UTC ipvs: add per-service secure_tcp 1 adrianox@gmail.com finished in 4h33m0s
2026-09-12 01:10 UTC netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name 1 namangulati@google.com finished in 4h0m0s
2026-09-11 14:59 UTC tests: shell: drop metainfo from the json dump comparison 1 avinash.duduskar@gmail.com skipped
2026-09-11 14:59 UTC evaluate: reject negative values for unsigned datatypes 3 avinash.duduskar@gmail.com skipped
2026-09-11 14:42 UTC netfilter: conntrack: prevent nf_conntrack_buckets race condition 1 fmancera@suse.de finished in 1h13m0s
2026-09-10 20:02 UTC netfilter: nft_synproxy: use the family-aware checksum helper 1 kmehltretter@gmail.com finished in 3h59m0s
2026-09-10 16:20 UTC netfilter: flowtable: Saturate 16-bit flow_tuple->mtu 1 alice.kernel@fastmail.im finished in 4h23m0s
2026-09-10 10:54 UTC netfilter: conntrack: make filtering by zone discoverable 2 i.maximets@ovn.org finished in 4h35m0s
2026-09-10 08:33 UTC netfilter: nft_flow_offload: drop flowtable reference on init error path 1 ljp1205831794@gmail.com finished in 4h31m0s
2026-09-10 08:03 UTC netfilter: nf_tables: skip expired catchall elements on insert and delete 2 ljp1205831794@gmail.com finished in 3h59m0s
2026-09-09 14:49 UTC netfilter: ctnetlink: fix inverted IPv6 address match in dump filter 1 piotr@kubik.pl finished in 4h56m0s
2026-09-09 14:36 UTC netfilter: x_tables: avoid holding mutex over faultable user copies 2 zihanx@nebusec.ai finished in 5h0m0s
2026-09-09 09:34 UTC netfilter: nfnetlink: Fix for interrupted hook dumps 4 phil@nwl.cc skipped
2026-09-09 08:17 UTC netfilter: flowtable: check namespace before iterating flows 1 qingfang.deng@linux.dev finished in 4h12m0s
2026-09-08 12:32 UTC netfilter: nf_tables: skip expired catchall elements in dedup walk 1 ljp1205831794@gmail.com finished in 4h12m0s
2026-09-08 10:02 UTC netfilter: Conntrack counter review 1 phil@nwl.cc finished in 4h46m0s
2026-09-07 12:03 UTC netfilter: xt_IDLETIMER: restrict to init_net 1 zhilinz@nebusec.ai finished in 4h53m0s
2026-09-07 09:52 UTC netfilter: fix typos in comments 2 hemanth.selam@gmail.com skipped
2026-09-07 07:33 UTC net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload 2 lorenzo.bianconi@oss.qualcomm.com finished in 3h59m0s
2026-09-07 06:42 UTC net: fix typos in comments 1 hemanth.selam@gmail.com skipped
2026-09-07 00:31 UTC netfilter: nf_conntrack_h323: fix OOB read in decode_enum() 1 elb12345@hotmail.co.uk finished in 2h37m0s
2026-09-06 14:20 UTC netfilter: flowtable: advertise the vlan match in used_keys 1 julius@bairaktaris.de finished in 4h55m0s
2026-09-06 14:19 UTC netfilter: flowtable: advertise the vlan match in used_keys 1 julius@bairaktaris.de finished in 4h36m0s
2026-09-06 13:29 UTC netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read 2 weir@nebusec.ai finished in 4h54m0s
2026-09-06 08:44 UTC netfilter: ip6t_rpfilter: reject routes without inet6_dev 2 bestswngs@gmail.com finished in 4h24m0s
2026-09-06 07:54 UTC netfilter: ip6t_rpfilter: reject routes without inet6_dev 2 bestswngs@gmail.com finished in 4h34m0s
2026-09-06 03:49 UTC netfilter: ip6t_rpfilter: handle routes without inet6_dev 1 bestswngs@gmail.com finished in 4h11m0s
2026-09-04 17:44 UTC netfilter: conntrack: make filtering by zone discoverable 1 i.maximets@ovn.org finished in 50m0s
2026-09-04 17:33 UTC netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read 1 weir@nebusec.ai finished in 2h9m0s
2026-09-04 16:13 UTC selftests: net: use KHDR_INCLUDES in CFLAGS 1 matttbe@kernel.org skipped
2026-09-04 12:52 UTC netfilter: nfnetlink: Fix for interrupted hook dumps 3 phil@nwl.cc skipped
2026-09-04 11:45 UTC net: netfilter: fix typo "specifiy" in comment 1 hemanth.selam@gmail.com skipped
2026-09-03 14:39 UTC netfilter: nfnetlink: Fix for interrupted hook dumps 2 phil@nwl.cc finished in 5h24m0s
2026-09-03 12:10 UTC net/ipv6: don't route packets with unknown source address 2 ihuguet@riseup.net finished in 4h46m0s
2026-09-03 11:55 UTC netfilter: nf_dup: disable duplication in user namespaces 2 zihanx@nebusec.ai finished in 3h2m0s
2026-09-02 22:01 UTC Change skb secmarks to x-array indexes 2 casey@schaufler-ca.com finished in 4h33m0s
2026-09-02 17:52 UTC bpf: Fix socket leaks around connect(AF_UNSPEC)+listen() 3 mhal@rbox.co finished in 4h2m0s
2026-09-02 15:51 UTC netfilter: flowtable: carry a priority into the offload 2 julius@bairaktaris.de finished in 4h37m0s
2026-09-01 16:32 UTC net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload 1 lorenzo.bianconi@oss.qualcomm.com finished in 4h3m0s
2026-09-01 13:47 UTC netfilter: x_tables: avoid holding mutex over faultable user copies 1 zihanx@nebusec.ai finished in 4h22m0s
2026-09-01 11:50 UTC net/ipv6: don't route packets with unknown source address 1 ihuguet@riseup.net finished in 4h11m0s
[2 findings]
2026-09-01 09:48 UTC libnftables: Drop symbol nft_bison_have_extended_errors 1 phil@nwl.cc skipped
2026-09-01 09:26 UTC netfilter: flowtable: carry a priority into the offload 1 julius@bairaktaris.de finished in 4h18m0s
2026-08-31 22:37 UTC Change skb secmarks to x-array indexes 1 casey@schaufler-ca.com finished in 1h50m0s
[1 findings]
2026-08-31 19:49 UTC netfilter: nft_set_pipapo: restore cloned mapping table memcg accounting 1 kmehltretter@gmail.com skipped
2026-08-31 18:07 UTC netfilter: nf_tables: missing objects with no memcg accounting 2 kmehltretter@gmail.com skipped
2026-08-31 01:33 UTC netfilter: nf_conntrack_h323: fix double cursor advance in decode_int() 1 l1138897701@163.com finished in 2h6m0s
2026-08-29 05:19 UTC netfilter: nf_dup: prevent asynchronous duplicate recursion 1 zihanx@nebusec.ai finished in 5h14m0s
2026-08-27 20:48 UTC netfilter: nf_tables: Fix netdev hook sanity checks 1 phil@nwl.cc skipped
2026-08-27 20:42 UTC tests: shell: Test odd netdev hook updates 1 phil@nwl.cc skipped