| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-08-27 20:42 UTC | tests: shell: Test odd netdev hook updates | 1 | phil@nwl.cc | skipped |
| 2026-08-27 20:38 UTC | netfilter: nfnetlink: Fix for interrupted hook dumps | 1 | phil@nwl.cc | finished in 5h1m0s |
| 2026-08-27 10:32 UTC | netfilter: nf_tables: fix device name and prefix match in hook lookup | 4 | fmancera@suse.de | finished in 4h12m0s |
| 2026-08-26 13:32 UTC | netfilter: nf_tables: fix device name and prefix match in hook lookup | 3 | fmancera@suse.de | finished in 4h36m0s |
| 2026-08-25 20:02 UTC | netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race | 2 | blbllhy@gmail.com | finished in 4h5m0s |
| 2026-08-25 15:27 UTC | net: netfilter: report NLM_F_DUMP_FILTERED when all is filtered out | 1 | i.maximets@ovn.org | finished in 4h31m0s |
| 2026-08-24 12:12 UTC | netfilter: cttimeout: prevent UAF during module unload | 1 | nicoyip.dev@gmail.com | skipped |
| 2026-08-24 11:58 UTC | netfilter: flowtable: flush delete work after final GC | 1 | nicoyip.dev@gmail.com | finished in 5h1m0s |
| 2026-08-24 09:28 UTC | netfilter: nf_tables: fix device name and prefix match in hook lookup | 2 | fmancera@suse.de | finished in 4h18m0s |
| 2026-08-24 02:32 UTC | netfilter: nf_conntrack_h323: fix double cursor advance in decode_int() | 2 | l1138897701@163.com | finished in 2h24m0s |
| 2026-08-23 17:05 UTC | netfilter: nf_log: unregister loggers before per-net teardown | 2 | nicoyip.dev@gmail.com | skipped |
| 2026-08-22 21:40 UTC | netfilter: nf_conntrack: avoid truncating IPv6 nexthdr offset | 1 | jeremy.jean@oss.cyber.gouv.fr | finished in 4h25m0s |
| 2026-08-22 21:09 UTC | netfilter: bpf: disallow conntrack kfuncs for token programs | 1 | jeremy.jean@oss.cyber.gouv.fr | finished in 2h20m0s |
| 2026-08-22 18:46 UTC | netfilter: nf_log: clear per-net loggers on unregister | 1 | nicoyip.dev@gmail.com | skipped |
| 2026-08-21 09:50 UTC | netfilter: osf: remove unreachable break in nf_osf_ttl() | 2 | xiaolinkui@126.com | skipped |
| 2026-08-21 06:52 UTC | netfilter: nf_conntrack_h323: fix double cursor advance in decode_int() | 1 | l1138897701@163.com | finished in 2h18m0s |
| 2026-08-21 02:28 UTC | netfilter: osf: remove unreachable break in nf_osf_ttl() | 1 | xiaolinkui@126.com | skipped |
| 2026-08-20 12:57 UTC | netfilter: conntrack: fix nf_conntrack_expect_max default value in documentation | 1 | sunshaojie@kylinos.cn | skipped |
| 2026-08-20 01:06 UTC | netfilter: ipset: list:set: defer ip_set_put_byindex to RCU callback | 1 | blbllhy@gmail.com | finished in 4h27m0s |
| 2026-08-18 20:00 UTC | netfilter: flowtable: publish HW_DEAD after worker is done | 1 | jeremy.jean@oss.cyber.gouv.fr | finished in 4h19m0s |
| 2026-08-18 10:18 UTC | netfilter: nf_tables: fix device name and prefix match in hook lookup | 1 | fmancera@suse.de | finished in 4h52m0s |
| 2026-08-18 01:56 UTC | netfilter: xt_IDLETIMER: fix out-of-bounds heap read in checkentry | 1 | weir@nebusec.ai | skipped |
| 2026-08-17 17:22 UTC | lib/folio_pool: Direct-Map Large Folio Pool & Scratchpad bump allocators | 1 | devnull@kernel.org |
finished
in 1h17m0s
[1 findings] |
| 2026-08-17 07:14 UTC | ipvs: bound LBLCR and LBLC cache growth | 2 | zhilinz@nebusec.ai | finished in 4h8m0s |
| 2026-08-16 15:22 UTC | ipvs: bound LBLCR cache growth | 1 | zhilinz@nebusec.ai | finished in 4h26m0s |
| 2026-08-15 20:57 UTC | x86: add missing vzeroupper instructions | 1 | ebiggers@kernel.org | skipped |
| 2026-08-15 13:31 UTC | netfilter: nf_conntrack_sip: fix OOB read in ct_sip_parse_transport() | 1 | joasantonio108@gmail.com | finished in 2h24m0s |
| 2026-08-14 21:10 UTC | evaluate: reject negative values for unsigned datatypes | 2 | avinash.duduskar@gmail.com | skipped |
| 2026-08-13 20:48 UTC | Change skb secmarks to x-array indexes | 1 | casey@schaufler-ca.com | finished in 5h7m0s |
| 2026-08-13 11:45 UTC | tests: shell: Keep dumps with numeric protocol values | 1 | phil@nwl.cc | skipped |
| 2026-08-10 22:17 UTC | netfilter: nft_ct: validate timeout object protocol | 1 | kylebot@openai.com | finished in 5h0m0s |
| 2026-08-10 22:16 UTC | netfilter: nf_conntrack: validate template helper protocol | 1 | kylebot@openai.com | finished in 4h5m0s |
| 2026-08-10 22:13 UTC | ipvs: fix reversed sequence option serialization | 1 | kylebot@openai.com | finished in 4h57m0s |
| 2026-08-10 22:10 UTC | ipvs: reject invalid states in connection template sync records | 1 | kylebot@openai.com | finished in 4h31m0s |
| 2026-08-10 16:07 UTC | netfilter: nf_reject: initialize IPCB at inet ingress | 2 | david.lee@trailofbits.com | finished in 4h54m0s |
| 2026-08-10 13:01 UTC | net: sysctl: Const Qualify sysctl ctl_table arrays | 4 | joel.granados@kernel.org | finished in 4h5m0s |
| 2026-08-10 11:35 UTC | netfilter: nf_tables: don't queue packet path object notifications | 1 | littleddfu@gmail.com | finished in 4h18m0s |
| 2026-08-08 01:33 UTC | tests: shell: use an unassigned protocol number in exclusive_start_cond | 1 | avinash.duduskar@gmail.com | skipped |
| 2026-08-08 01:33 UTC | evaluate: reject negative values for unsigned datatypes | 1 | avinash.duduskar@gmail.com | skipped |
| 2026-08-07 08:45 UTC | netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers | 4 | running910@gmail.com | finished in 4h18m0s |
| 2026-08-06 16:11 UTC | netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path | 1 | a.velichayshiy@ispras.ru | finished in 4h36m0s |
| 2026-08-05 08:53 UTC | net: pass net_device_path_ctx to dev_fill_forward_path() | 1 | lorenzo.bianconi@oss.qualcomm.com | finished in 4h6m0s |
| 2026-08-04 09:51 UTC | netfilter: nf_reject_ipv4: initialize IPCB at inet ingress | 1 | david.lee@trailofbits.com | finished in 1h51m0s |
| 2026-08-04 06:10 UTC | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 2 | david.lee@trailofbits.com | finished in 1h24m0s |
| 2026-08-03 01:11 UTC | netfilter: validate L4 headers after userspace packet writes | 4 | zhilinz@nebusec.ai | finished in 4h28m0s |
| 2026-08-01 14:27 UTC | netfilter: nf_conntrack: defer invalid log until after unlock | 4 | zihanx@nebusec.ai | finished in 5h6m0s |
| 2026-08-01 12:10 UTC | netfilter: ipset: serialize kernel-side put-byindex with swap | 1 | zhilinz@nebusec.ai | finished in 4h17m0s |
| 2026-08-01 07:27 UTC | datatype: accept a numeric cgroupsv2 id on input | 3 | avinash.duduskar@gmail.com | skipped |
| 2026-07-31 16:09 UTC | bpf: Fix netns reference imbalance in conntrack kfuncs | 3 | nicoyip.dev@gmail.com | finished in 2h12m0s |
| 2026-07-31 14:53 UTC | netfilter: conntrack: sctp: validate vtag before state changes | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h8m0s |
| 2026-07-31 14:27 UTC | ipvs: fix destination overload state updates | 4 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h28m0s |
| 2026-07-31 14:08 UTC | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 1 | david.lee@trailofbits.com | finished in 4h50m0s |
| 2026-07-31 14:08 UTC | netfilter: nf_conntrack: prevent helper extension relocation | 1 | david.lee@trailofbits.com | finished in 4h7m0s |
| 2026-07-31 13:44 UTC | netfilter: nf_conntrack: defer invalid log until after unlock | 3 | zihanx@nebusec.ai | finished in 4h31m0s |
| 2026-07-31 06:36 UTC | netfilter: bridge: release template ct on non-IP path | 1 | zhilinz@nebusec.ai | finished in 4h25m0s |
| 2026-07-31 03:48 UTC | netfilter: validate L4 headers after userspace packet writes | 3 | zhilinz@nebusec.ai | finished in 4h30m0s |
| 2026-07-30 13:55 UTC | netfilter: fix TCP conntrack invalid-log deadlock | 2 | zihanx@nebusec.ai | finished in 4h44m0s |
| 2026-07-30 09:18 UTC | conntrack.8: Document --stats counters | 2 | phil@nwl.cc | skipped |
| 2026-07-30 08:29 UTC | bpf: Fix netns reference imbalance in conntrack kfuncs | 2 | nicoyip.dev@gmail.com | finished in 2h51m0s |
| 2026-07-30 07:30 UTC | netfilter: validate L4 headers after userspace packet writes | 2 | zhilinz@nebusec.ai | finished in 4h17m0s |
| 2026-07-29 17:37 UTC | datatype: accept a numeric cgroupsv2 id on input | 2 | avinash.duduskar@gmail.com | skipped |
| 2026-07-29 17:31 UTC | netfilter: ebt_nflog: pin the NFLOG backend | 1 | nicoyip.dev@gmail.com | finished in 2h16m0s |
| 2026-07-29 16:31 UTC | bpf: Fix netns reference imbalance in conntrack kfuncs | 1 | nicoyip.dev@gmail.com | finished in 2h9m0s |
| 2026-07-29 13:56 UTC | ipvs: stop estimator after disabled calc phase | 3 | zhilinz@nebusec.ai | finished in 4h34m0s |
| 2026-07-29 13:48 UTC | netfilter: fix TCP conntrack invalid-log deadlock | 1 | zihanx@nebusec.ai | skipped |
| 2026-07-28 10:10 UTC | gitignore: Only ignore top level *.m4 | 1 | phil@nwl.cc | skipped |
| 2026-07-28 07:35 UTC | netfilter: conntrack: sctp: verify vtag before state changes | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h49m0s |
| 2026-07-28 04:21 UTC | ipvs: stop estimator after disabled calc phase | 2 | zhilinz@nebusec.ai | finished in 4h41m0s |
| 2026-07-27 19:41 UTC | netfilter: conncount: normalize tuple and zone on successful ct lookup | 1 | fmancera@suse.de | finished in 4h53m0s |
| 2026-07-27 18:09 UTC | netfilter: ebtables: avoid unbounded counter allocations | 1 | enjou1224z@gmail.com | finished in 6h25m0s |
| 2026-07-27 17:58 UTC | netfilter: h323: fix helper NAT mangling | 1 | enjou1224z@gmail.com | finished in 3h30m0s |
| 2026-07-27 16:58 UTC | ipvs: guard estimator enqueue until limits are set | 1 | enjou1224z@gmail.com | finished in 5h52m0s |
| 2026-07-27 08:24 UTC | datatype: accept a numeric cgroupsv2 id on input | 1 | avinash.duduskar@gmail.com | skipped |
| 2026-07-24 11:01 UTC | netfilter: ip6tables: set hotdrop for malformed extension header matches | 3 | running910@gmail.com | finished in 5h39m0s |
| 2026-07-22 22:38 UTC | netfilter: ipset: fix refcount race between list:set GC and swap | 1 | xmei5@asu.edu | finished in 5h45m0s |
| 2026-07-22 12:57 UTC | netfilter: nf_conntrack_h323: fix get_bitmap() overread | 1 | kudo3228@gmail.com | finished in 3h0m0s |
| 2026-07-21 07:46 UTC | netfilter: xt_hashlimit: fix uninitialized rateinfo.burst read on shared table | 1 | talha.anything.info@gmail.com | finished in 6h8m0s |
| 2026-07-19 22:15 UTC | netfilter: nft_payload: fix mask build for partial field offload | 1 | xmei5@asu.edu | finished in 5h1m0s |
| 2026-07-17 18:59 UTC | nft: fix out-of-bounds read listing an old-revision match | 1 | omkhar@linkedin.com | skipped |
| 2026-07-17 18:56 UTC | nft: bridge: fix among buffer overflow when set has no size | 1 | omkhar@linkedin.com | skipped |
| 2026-07-16 14:07 UTC | ipvs: use type-safe allocation helpers in ip_vs_rht_alloc | 1 | subasris1210@gmail.com | skipped |
| 2026-07-15 23:02 UTC | tests: py: Fix --keep test runner option | 1 | phil@nwl.cc | skipped |
| 2026-07-15 14:48 UTC | netfilter: conntrack: prevent helper extension relocation | 1 | iostreampy@proton.me | finished in 4h53m0s |
| 2026-07-14 03:21 UTC | netfilter: ip6tables: set hotdrop for malformed extension header matches | 2 | running910@gmail.com | finished in 5h27m0s |
| 2026-07-13 18:36 UTC | netfilter: nft_fib: bail out if input device is missing | 1 | xmei5@asu.edu | finished in 5h11m0s |
| 2026-07-13 16:33 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 3 | bestswngs@gmail.com | finished in 5h12m0s |
| 2026-07-13 16:15 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 2 | bestswngs@gmail.com | finished in 55m0s |
| 2026-07-13 12:53 UTC | selftests: netfilter: nft_flowtable.sh: fix offload counter verification for tunnel tests | 2 | lorenzo@kernel.org | skipped |
| 2026-07-13 12:46 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 6 | lorenzo@kernel.org | skipped |
| 2026-07-13 11:07 UTC | net: sysctl: Const Qualify sysctl ctl_table arrays | 3 | joel.granados@kernel.org | finished in 5h22m0s |
| 2026-07-13 09:59 UTC | netfilter: ipset: do not update comments from kernel-side hash adds | 1 | david.lee@trailofbits.com | finished in 5h33m0s |
| 2026-07-13 09:48 UTC | ipvs: fix destination overload state updates | 3 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h28m0s |
| 2026-07-12 23:42 UTC | netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() | 1 | xmei5@asu.edu | finished in 3h29m0s |
| 2026-07-12 07:32 UTC | netfilter: nf_nat: stop reusing DEAD RTP expectations | 2 | iostreampy@proton.me | finished in 5h12m0s |
| 2026-07-11 14:21 UTC | netfilter: nf_nat: do not reuse an unexpected expectation on RTCP clash | 1 | iostreampy@proton.me | finished in 2h55m0s |
| 2026-07-11 13:55 UTC | selftests: netfilter: nft_flowtable.sh: check offload counters for IP6IP6 tunnel test | 1 | lorenzo@kernel.org | skipped |
| 2026-07-10 15:14 UTC | Address Sashiko review of NAT hook dump code | 3 | phil@nwl.cc | finished in 4h51m0s |
| 2026-07-10 13:27 UTC | netfilter: nf_nat: recalculate TCP TS offset after SNAT port rewrite | 3 | xietangxin@h-partners.com | finished in 4h51m0s |
| 2026-07-09 19:46 UTC | Address Sashiko review of NAT hook dump code | 2 | phil@nwl.cc | finished in 3h4m0s |
| 2026-07-09 13:12 UTC | netfilter: nf_nat: recalculate TCP TS offset when snat change sport | 2 | xietangxin@h-partners.com | finished in 4h57m0s |