| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-07-09 08:52 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 5 | lorenzo@kernel.org | finished in 5h8m0s |
| 2026-07-09 06:30 UTC | netfilter: ip6tables: set hotdrop for malformed extension header matches | 1 | running910@gmail.com | finished in 5h17m0s |
| 2026-07-08 18:11 UTC | netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() | 2 | xmei5@asu.edu | finished in 2h42m0s |
| 2026-07-08 16:19 UTC | Address Sashiko review of NAT hook dump code | 1 | phil@nwl.cc |
finished
in 2h11m0s
[1 findings] |
| 2026-07-08 06:04 UTC | ipvs: make destination flags atomic | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h24m0s |
| 2026-07-08 05:27 UTC | netfilter: nf_conncount: fix zone comparison in tuple dedup | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h7m0s |
| 2026-07-07 19:51 UTC | netfilter: replace u_int*_t with kernel int types (batch 3) | 1 | carlos@carlosgrillet.me | skipped |
| 2026-07-07 11:00 UTC | netfilter: ecache: fix inverted time_after() check | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h58m0s |
| 2026-07-07 09:10 UTC | netfilter: Add bridge-fastpath | 12 | ericwouds@gmail.com | finished in 4h54m0s |
| 2026-07-07 08:57 UTC | ipvs: make destination flags atomic | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h58m0s |
| 2026-07-07 06:46 UTC | ss: Don't re-print an SCTP listen socket as an assoc | 1 | jamie.bainbridge@gmail.com | skipped |
| 2026-07-06 23:28 UTC | netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() | 1 | xmei5@asu.edu | finished in 2h51m0s |
| 2026-07-06 11:48 UTC | netfilter: nf_conncount: fix zone comparison in tuple dedup | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h13m0s |
| 2026-07-06 10:16 UTC | ipvs: use parsed transport offsets in state handlers | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h28m0s |
| 2026-07-05 23:36 UTC | netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag | 1 | xmei5@asu.edu | finished in 4h55m0s |
| 2026-07-05 21:58 UTC | netfilter: ebtables: terminate table name before find_table_lock() | 1 | xmei5@asu.edu | finished in 4h26m0s |
| 2026-07-05 12:56 UTC | ipvs: skip IPv6 extension headers in TCP state lookup | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h25m0s |
| 2026-07-05 12:30 UTC | ipvs: skip IPv6 extension headers in SCTP state lookup | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h6m0s |
| 2026-07-03 16:22 UTC | netfilter: nft_lookup: fix catchall element handling with inverted lookups | 1 | ty@000ty.net | finished in 4h0m0s |
| 2026-07-03 14:10 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 4 | lorenzo@kernel.org | finished in 4h55m0s |
| 2026-07-03 07:32 UTC | netfilter: xt_time: reject pre-epoch calendar matching | 1 | enjou1224z@gmail.com | finished in 4h25m0s |
| 2026-07-03 05:04 UTC | netfilter: xt_connmark: reject invalid shift parameters | 1 | enjou1224z@gmail.com | finished in 4h51m0s |
| 2026-07-02 11:28 UTC | ipvs: reset full ip_vs_seq structs in ip_vs_conn_new | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 2h39m0s |
| 2026-07-02 10:10 UTC | ipvs: Move defense_work and est_reload_work to system_dfl_long_wq | 2 | iluceno@suse.de | finished in 1h34m0s |
| 2026-07-02 07:34 UTC | ipvs: fix PMTU for GUE/GRE tunnel ICMP errors | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h41m0s |
| 2026-07-01 10:09 UTC | netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop | 2 | running910@gmail.com | finished in 30m0s |
| 2026-07-01 06:59 UTC | ipvs: fix PMTU for GUE/GRE tunnel ICMP errors | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h25m0s |
| 2026-06-30 06:57 UTC | netfilter: nf_flow_table_path: L2 bridge offload | 2 | pawlik.dan@gmail.com | finished in 4h32m0s |
| 2026-06-29 12:32 UTC | netfilter: nf_flow_table_path: L2 bridge offload | 1 | pawlik.dan@gmail.com | finished in 4h44m0s |
| 2026-06-29 10:53 UTC | netfilter: nft_fib: reject fib expression on the netdev egress hook | 2 | theodorlarionov@gmail.com | finished in 4h11m0s |
| 2026-06-29 09:33 UTC | netfilter: nf_nat_masquerade: recalculate TCP TS offset when port is randomized | 1 | xietangxin@h-partners.com | finished in 4h17m0s |
| 2026-06-28 08:05 UTC | netfilter: xt_u32: reject invalid shift counts | 1 | n05ec@lzu.edu.cn | finished in 4h33m0s |
| 2026-06-27 16:05 UTC | ipvs: preserve conn hash flags when late-binding dest | 1 | n05ec@lzu.edu.cn | finished in 4h5m0s |
| 2026-06-26 22:25 UTC | netfilter: x_tables: replace strlcat() with snprintf() | 1 | icb@fastmail.org | skipped |
| 2026-06-26 06:49 UTC | netfilter: nf_conntrack_sip: guard against missing skb dst | 1 | n05ec@lzu.edu.cn | finished in 2h9m0s |
| 2026-06-25 17:25 UTC | netfilter: replace u_int*_t with kernel int types (batch 2) | 2 | carlos@carlosgrillet.me | skipped |
| 2026-06-25 13:31 UTC | netfilter: remove redundant null check before kvfree() | 1 | subasris1210@gmail.com | skipped |
| 2026-06-25 12:28 UTC | netfilter: nft_fib: reject fib expression on the netdev egress hook | 1 | theodorlarionov@gmail.com | finished in 4h14m0s |
| 2026-06-25 01:00 UTC | netfilter: ipset: fix race between dump and ip_set_list resize | 1 | xmei5@asu.edu | finished in 4h33m0s |
| 2026-06-24 18:40 UTC | netfilter: replace u_int*_t with kernel int types (batch 2) | 1 | carlos@carlosgrillet.me | skipped |
| 2026-06-21 18:49 UTC | netfilter: TCPMSS: handle packets with unaligned MSS option | 3 | kacper.kokot.44@gmail.com | finished in 4h2m0s |
| 2026-06-18 12:58 UTC | netfilter: ip6t_ah: validate AH header length | 1 | running910@gmail.com | finished in 4h13m0s |
| 2026-06-18 11:17 UTC | tests: shell: Run tests with a fixed TZ | 1 | phil@nwl.cc | skipped |
| 2026-06-18 10:18 UTC | bpf: Guard conntrack opts error writes | 2 | chenyy23@mails.tsinghua.edu.cn | finished in 1h7m0s |
| 2026-06-17 17:06 UTC | netfilter: nf_flow_table: separate tunnel route state from direct xmit | 2 | n05ec@lzu.edu.cn | finished in 4h35m0s |
| 2026-06-16 18:29 UTC | netfilter: replace u_int*_t with kernel int types | 3 | carlos@carlosgrillet.me | finished in 1h40m0s |
| 2026-06-16 05:42 UTC | bpf: Guard conntrack opts error writes | 1 | chenyy23@mails.tsinghua.edu.cn | finished in 55m0s |
| 2026-06-15 13:38 UTC | netfilter: replace u_int*_t with kernel int types | 2 | carlos@carlosgrillet.me | finished in 1h56m0s |
| 2026-06-15 09:18 UTC | netfilter: flowtable: fix and simplify IP6IP6 tunnel handling | 2 | lorenzo@kernel.org | finished in 4h24m0s |
| 2026-06-14 05:25 UTC | netfilter: x_tables.h: fix all kernel-doc warnings | 1 | rdunlap@infradead.org | finished in 1h34m0s |
| 2026-06-13 10:27 UTC | netfilter: xt_nat: bridge nft_compat rule can trigger NULL-deref | 1 | n05ec@lzu.edu.cn | finished in 4h42m0s |
| 2026-06-11 12:52 UTC | parser_bison: Fix for bison < 3.6 | 2 | phil@nwl.cc | skipped |
| 2026-06-11 07:21 UTC | netfilter: xt_cluster: reject template conntracks in hash match | 1 | n05ec@lzu.edu.cn | finished in 4h52m0s |
| 2026-06-11 04:21 UTC | netfilter: nft_synproxy: stop bypassing the priv->info snapshot | 1 | runyu.xiao@seu.edu.cn | finished in 4h54m0s |
| 2026-06-10 11:57 UTC | profiling: Include unistd.h to avoid compiler warnings | 1 | phil@nwl.cc | skipped |
| 2026-06-10 11:57 UTC | parser_bison: Fix for bison < 3.6 | 1 | phil@nwl.cc | skipped |
| 2026-06-09 22:55 UTC | netfilter: nf_log: validate MAC header was set before dumping it | 2 | xmei5@asu.edu | finished in 4h18m0s |
| 2026-06-08 17:06 UTC | netfilter: flowtable: use pskb_may_pull() in nf_flow_ip6_tunnel_proto() | 1 | lorenzo@kernel.org | finished in 4h21m0s |
| 2026-06-08 12:33 UTC | netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() | 2 | lorenzo@kernel.org | finished in 4h19m0s |
| 2026-06-08 10:31 UTC | netfilter: nf_reject_ipv6: do not reject ICMPv6 Redirect with an ICMPv6 error | 1 | sayooj@aerlync.com | finished in 5h10m0s |
| 2026-06-08 05:43 UTC | bridge: br_netfilter: pin bridge device while NFQUEUE holds fake dst | 5 | n05ec@lzu.edu.cn | finished in 1h45m0s |
| 2026-06-08 00:11 UTC | netfilter: nf_log: validate MAC header was set before dumping it | 1 | xmei5@asu.edu | finished in 4h5m0s |
| 2026-06-07 16:44 UTC | netfilter: synproxy: fix unaligned access to TCP timestamp option | 1 | rosenp@gmail.com | finished in 4h24m0s |
| 2026-06-06 06:50 UTC | bridge: br_netfilter: pin bridge device while NFQUEUE holds fake dst | 4 | n05ec@lzu.edu.cn | finished in 1h1m0s |
| 2026-06-05 16:47 UTC | netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() | 1 | lorenzo@kernel.org | finished in 4h19m0s |
| 2026-06-04 17:32 UTC | bridge: br_netfilter: pin bridge device while NFQUEUE holds fake dst | 3 | n05ec@lzu.edu.cn | finished in 4h20m0s |
| 2026-06-04 17:10 UTC | netfilter: nf_flow_table: separate tunnel route state from direct xmit | 1 | n05ec@lzu.edu.cn | finished in 4h27m0s |
| 2026-06-03 19:29 UTC | Eliminate variable declarations in switch cases | 1 | phil@nwl.cc | skipped |
| 2026-06-03 18:47 UTC | intervals: Fix for inconsistent union field use | 1 | phil@nwl.cc | skipped |
| 2026-06-03 07:38 UTC | netfilter: nf_conntrack: destroy stale expectfn expectations on unregister | 1 | bestswngs@gmail.com | finished in 4h25m0s |
| 2026-06-03 02:50 UTC | netfilter: flowtable: remove inline segmentation | 1 | qingfang.deng@linux.dev | finished in 3h59m0s |
| 2026-06-02 13:07 UTC | tests: shell: packetpath/ct_count: Add missing socat feature test | 1 | phil@nwl.cc | skipped |
| 2026-05-31 15:50 UTC | Add IPv4 over IPv6 and SIT flowtable SW acceleration | 3 | lorenzo@kernel.org | finished in 3h56m0s |
| 2026-05-28 22:34 UTC | netfilter: TCPMSS: fix dropped packets when MSS option is unaligned | 2 | kacper.kokot.44@gmail.com | finished in 1h16m0s |
| 2026-05-28 07:21 UTC | netfilter: ipvs: fix ct refcount leak when template is invalid | 1 | vulab@iscas.ac.cn |
finished
in 4h49m0s
[1 findings] |
| 2026-05-28 07:08 UTC | netfilter: flowtable: fix offloaded ct timeout never being extended | 2 | adibente@gmail.com | finished in 4h28m0s |
| 2026-05-27 13:57 UTC | netfilter: nft_tunnel: fix use-after-free on object destroy | 1 | tristmd@gmail.com | finished in 1h43m0s |
| 2026-05-27 08:18 UTC | ipvs: Replace use of system_unbound_wq with system_dfl_long_wq | 3 | marco.crivellari@suse.com | finished in 1h24m0s |
| 2026-05-26 06:01 UTC | netfilter: flowtable: fix offloaded ct timeout never being extended | 1 | adibente@gmail.com | finished in 4h2m0s |
| 2026-05-26 03:21 UTC | bridge: br_netfilter: move fake rtable off struct net_bridge | 2 | n05ec@lzu.edu.cn | finished in 4h9m0s |
| 2026-05-25 21:58 UTC | netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() | 1 | rosenp@gmail.com | finished in 3h56m0s |
| 2026-05-25 20:11 UTC | netfilter: TCPMSS: fix dropped packets when MSS option is unaligned | 1 | kacper.kokot.44@gmail.com | finished in 4h9m0s |
| 2026-05-25 16:24 UTC | netfilter: flowtable: resolve LAG slave for direct HW offload | 1 | hurryman2212@gmail.com | finished in 4h45m0s |
| 2026-05-25 15:35 UTC | netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures | 1 | fmancera@suse.de | finished in 1h3m0s |
| 2026-05-23 15:26 UTC | netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag | 1 | devnexen@gmail.com | finished in 1h42m0s |
| 2026-05-22 10:47 UTC | netfilter: xt_NFQUEUE: prefer raw_smp_processor_id | 1 | fmancera@suse.de | finished in 4h26m0s |
| 2026-05-20 02:34 UTC | netfilter: nft_fib_ipv6: handle routes via external nexthop | 2 | jiayuan.chen@linux.dev | finished in 4h25m0s |
| 2026-05-19 21:23 UTC | netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read | 1 | meatuni001@gmail.com | finished in 1h40m0s |
| 2026-05-19 04:14 UTC | netfilter: nft_fib_ipv6: handle routes via external nexthop | 1 | jiayuan.chen@linux.dev | finished in 4h10m0s |
| 2026-05-19 01:55 UTC | ipvs: Use flexible array for MH lookup table | 1 | rosenp@gmail.com | finished in 2h4m0s |
| 2026-05-17 14:50 UTC | netfilter: ipset: preserve comment lifetime across resize and gc expiry | 2 | n05ec@lzu.edu.cn | finished in 4h9m0s |
| 2026-05-17 11:37 UTC | netfilter: nf_dup: preserve socket ownership on egress duplicates | 1 | n05ec@lzu.edu.cn | finished in 2h18m0s |
| 2026-05-16 15:23 UTC | netfilter: disable payload mangling in userns | 1 | tpluszz77@gmail.com | finished in 4h1m0s |
| 2026-05-15 13:51 UTC | net: Replace system_unbound_wq with system_dfl_wq | 2 | marco.crivellari@suse.com | finished in 1h59m0s |
| 2026-05-15 03:19 UTC | netfilter: nf_queue: hold bridge skb->dev while queued | 2 | n05ec@lzu.edu.cn | finished in 4h18m0s |
| 2026-05-14 14:46 UTC | net: neigh: Reallocate headroom if necessary in neigh_hh_bridge() | 4 | lorenzo@kernel.org | finished in 4h32m0s |
| 2026-05-14 14:16 UTC | netfilter: nf_conncount: prevent connlimit drops for early confirmed ct | 2 | fmancera@suse.de | finished in 4h24m0s |
| 2026-05-14 04:05 UTC | netfilter: xt_IDLETIMER: scope timer reuse to the owning netns | 1 | n05ec@lzu.edu.cn | finished in 4h29m0s |
| 2026-05-14 03:48 UTC | bridge: br_netfilter: give fake rtable its own lifetime | 1 | n05ec@lzu.edu.cn | finished in 4h38m0s |
| 2026-05-13 16:40 UTC | net: neigh: Reallocate headroom if necessary in neigh_hh_bridge() | 3 | lorenzo@kernel.org | finished in 4h30m0s |