| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-03-13 15:58 UTC | xfrm: prevent policy_hthresh.work from racing with netns teardown | 1 | raminwo0202@gmail.com | finished in 4h3m0s |
| 2026-03-12 11:39 UTC | xfrm: iptfs: only publish mode_data after clone setup | 2 | p@1g4.org | finished in 1h16m0s |
| 2026-03-10 18:16 UTC | xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() | 1 | imv4bel@gmail.com | finished in 1h18m0s |
| 2026-03-09 18:44 UTC | xfrm: XFRM_MSG_MIGRATE_STATE new netlink message | 6 | antony.antony@secunet.com | finished in 4h12m0s |
| 2026-03-09 17:30 UTC | xfrm: iptfs: only publish mode_data after clone setup | 1 | p@1g4.org | finished in 1h20m0s |
| 2026-03-09 10:32 UTC | xfrm: fix most sparse warnings | 1 | sd@queasysnail.net | finished in 4h14m0s |
| 2026-03-04 14:09 UTC | xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly | 2 | fmancera@suse.de | finished in 1h6m0s |
| 2026-03-03 17:10 UTC | xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly | 1 | fmancera@suse.de | finished in 1h16m0s |
| 2026-03-01 10:56 UTC | xfrm: iptfs: validate inner IPv4 header length in IPTFS payload | 1 | roshaen09@gmail.com | finished in 1h10m0s |
| 2026-02-26 10:27 UTC | icmp: Fix icmp error source address over xfrm tunnel | 5 | antony.antony@secunet.com | finished in 4h14m0s |
| 2026-02-26 07:53 UTC | esp: Consolidate esp4 and esp6. | 1 | steffen.klassert@secunet.com |
finished
in 1h9m0s
[1 findings] |
| 2026-02-24 02:18 UTC | xfrm: update outdated comment | 1 | kexinsun@smail.nju.edu.cn | finished in 1h14m0s |
| 2026-02-23 23:05 UTC | xfrm: misc bugfixes | 1 | sd@queasysnail.net | finished in 3h56m0s |
| 2026-02-20 09:41 UTC | pull request (net): ipsec 2026-02-20 | 1 | steffen.klassert@secunet.com | finished in 4h14m0s |
| 2026-02-17 17:16 UTC | espintcp: Fix race condition in espintcp_close() | 2 | imv4bel@gmail.com | finished in 1h2m0s |
| 2026-02-16 09:43 UTC | espintcp: Use disable_work_sync() instead of cancel_work_sync() in espintcp_close() | 1 | imv4bel@gmail.com | finished in 1h0m0s |
| 2026-02-06 17:14 UTC | xfrm: reduce struct sec_path size | 1 | pabeni@redhat.com | finished in 4h0m0s |
| 2026-02-05 16:44 UTC | xfrm: reduce struct sec_path size | 1 | pabeni@redhat.com | finished in 3h59m0s |
| 2026-02-03 06:34 UTC | xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path | 2 | jiayuan.chen@linux.dev | finished in 3h57m0s |
| 2026-01-30 10:42 UTC | xfrm: always flush state and policy upon NETDEV_UNREGISTER event | 2 | penguin-kernel@i-love.sakura.ne.jp | finished in 4h23m0s |
| 2026-01-28 10:25 UTC | icmp: Fix icmp error source address over xfrm tunnel | 4 | antony.antony@secunet.com | finished in 4h4m0s |
| 2026-01-27 15:32 UTC | xfrm: always flush state and policy upon NETDEV_DOWN/NETDEV_UNREGISTER events | 1 | penguin-kernel@i-love.sakura.ne.jp | finished in 3h59m0s |
| 2026-01-27 12:49 UTC | xfrm: skip templates check for packet offload tunnel mode | 1 | tariqt@nvidia.com | finished in 4h7m0s |
| 2026-01-27 11:38 UTC | xfrm6: fix uninitialized saddr in xfrm6_get_saddr() | 1 | jiayuan.chen@linux.dev | finished in 3h48m0s |
| 2026-01-27 10:42 UTC | xfrm: XFRM_MSG_MIGRATE_STATE new netlink message | 5 | antony.antony@secunet.com | finished in 3h52m0s |
| 2026-01-23 10:08 UTC | xfrm: kill xfrm_dev_{state,policy}_flush_secctx_check() | 1 | penguin-kernel@i-love.sakura.ne.jp | finished in 3h50m0s |
| 2026-01-19 11:19 UTC | xfrm: force flush upon NETDEV_UNREGISTER event | 1 | penguin-kernel@i-love.sakura.ne.jp | finished in 4h0m0s |
| 2026-01-19 08:53 UTC | xfrm: XFRM_MSG_MIGRATE_STATE new netlink message | 4 | antony.antony@secunet.com | finished in 4h7m0s |
| 2026-01-17 19:58 UTC | xfrm: XFRM_MSG_MIGRATE_STATE new netlink message | 2 | antony.antony@secunet.com | finished in 3h51m0s |
| 2026-01-15 08:04 UTC | xfrm: XFRM_MSG_MIGRATE_STATE new netlink message | 2 | antony.antony@secunet.com | finished in 3h57m0s |
| 2026-01-14 12:18 UTC | pull request (net): ipsec 2026-01-14 | 1 | steffen.klassert@secunet.com | finished in 4h14m0s |
| 2026-01-09 15:22 UTC | selftests/net/ipsec: Fix variable size type not at the end of struct | 1 | ankitkhushwaha.linux@gmail.com | finished in 50m0s |
| 2026-01-09 13:37 UTC | xfrm: XFRM_MSG_MIGRATE_STATE new netlink message | 1 | antony.antony@secunet.com | finished in 4h12m0s |
| 2025-12-11 10:30 UTC | xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is set | 2 | antony.antony@secunet.com | finished in 4h3m0s |
| 2025-12-06 08:38 UTC | net: ipv6: fix spelling typos in comments | 2 | i.shihao.999@gmail.com | skipped |
| 2025-11-28 03:48 UTC | xfrm: Use xfrm_ip2inner_mode() unconditionally | 3 | jianbol@nvidia.com | finished in 3h58m0s |
| 2025-11-27 14:05 UTC | xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is set | 1 | antony.antony@secunet.com | finished in 3h55m0s |
| 2025-11-27 10:31 UTC | net: ipv6: fix spelling typos in comments | 1 | i.shihao.999@gmail.com | skipped |
| 2025-11-26 05:47 UTC | selftests/net/ipsec: Fix variable size type not at the end of struct | 1 | ankitkhushwaha.linux@gmail.com | finished in 52m0s |
| 2025-11-25 09:29 UTC | xfrm: XFRM_MSG_MIGRATE_STATE new netlink message | 1 | antony.antony@secunet.com | skipped |
| 2025-11-21 15:16 UTC | Fix bonding IPSec races | 1 | cratiu@nvidia.com | skipped |
| 2025-11-20 03:56 UTC | xfrm: Fix inner mode lookup in tunnel mode GSO segmentation | 2 | jianbol@nvidia.com | finished in 4h7m0s |
| 2025-11-18 09:25 UTC | pull request (net-next): ipsec-next 2025-11-18 | 1 | steffen.klassert@secunet.com | finished in 3h53m0s |
| 2025-11-18 08:52 UTC | pull request (net): ipsec 2025-11-18 | 1 | steffen.klassert@secunet.com | finished in 4h4m0s |
| 2025-11-14 03:56 UTC | xfrm: Fix inner mode lookup in tunnel mode GSO segmentation | 1 | jianbol@nvidia.com | finished in 3h49m0s |
| 2025-11-13 10:43 UTC | bond: Use xfrm_state_migrate to migrate SAs | 2 | cratiu@nvidia.com | finished in 4h3m0s |
| 2025-11-12 10:22 UTC | bond: Use xfrm_state_migrate to migrate SAs | 1 | cratiu@nvidia.com | finished in 3h46m0s |
| 2025-11-10 06:41 UTC | xfrm: fix memory leak in xfrm_add_acquire() | 2 | zilin@seu.edu.cn | finished in 4h2m0s |
| 2025-11-08 05:10 UTC | xfrm: fix memory leak in xfrm_add_acquire() | 1 | zilin@seu.edu.cn | finished in 41m0s |
| 2025-11-03 01:50 UTC | xfrm docs update | 3 | bagasdotme@gmail.com | finished in 42m0s |
| 2025-11-01 09:47 UTC | xfrm docs update | 2 | bagasdotme@gmail.com | finished in 42m0s |
| 2025-10-29 11:06 UTC | ip-xfrm: add pcpu-num support | 1 | sd@queasysnail.net | skipped |
| 2025-10-29 09:50 UTC | xfrm: Prevent locally generated packets from direct output in tunnel mode | 1 | jianbol@nvidia.com | finished in 3h48m0s |
| 2025-10-29 08:26 UTC | xfrm docs update | 1 | bagasdotme@gmail.com | finished in 57m0s |
| 2025-10-28 06:29 UTC | pfkey: Deprecate pfkey | 2 | steffen.klassert@secunet.com | finished in 3h47m0s |
| 2025-10-28 02:22 UTC | xfrm: Correct inner packet family determination | 3 | jianbol@nvidia.com | finished in 3h40m0s |
| 2025-10-27 05:31 UTC | selftest: net: fix variable sized type issue not at the end of a struct | 2 | ankitkhushwaha.linux@gmail.com | finished in 38m0s |
| 2025-10-27 05:08 UTC | selftest: net: fix variable sized type not at the end of struct warnings | 1 | ankitkhushwaha.linux@gmail.com | finished in 39m0s |
| 2025-10-27 02:40 UTC | xfrm: Correct inner packet family determination | 2 | jianbol@nvidia.com | finished in 3h51m0s |
| 2025-10-27 02:34 UTC | xfrm: Remove redundant state inner mode check | 2 | jianbol@nvidia.com | finished in 3h46m0s |
| 2025-10-24 16:13 UTC | net: cxgb4/ch_ipsec: fix potential use-after-free in ch_ipsec_xfrm_add_state() callback | 4 | pavel.zhigulin@kaspersky.com | finished in 1h1m0s |
| 2025-10-24 02:31 UTC | xfrm: Correct inner packet family determination | 1 | jianbol@nvidia.com | finished in 3h42m0s |
| 2025-10-23 12:24 UTC | net: key: Fix potential integer overflow in set_ipsecrequest | 1 | clf700383@gmail.com | finished in 3h43m0s |
| 2025-10-22 06:10 UTC | pfkey: Deprecate pfkey | 1 | steffen.klassert@secunet.com | finished in 3h41m0s |
| 2025-10-22 06:03 UTC | esp: Consolidate esp4 and esp6. | 1 | steffen.klassert@secunet.com |
finished
in 31m0s
[1 findings] |
| 2025-10-21 10:09 UTC | fix poll behaviour for TCP-based tunnel protocols | 3 | ralf@mandelbit.com | finished in 4h1m0s |
| 2025-10-21 03:00 UTC | fix integer overflow in set_ipsecrequest | 1 | clf700383@gmail.com | finished in 3h44m0s |
| 2025-10-21 01:35 UTC | xfrm: IPsec hardware offload performance improvements | 1 | jianbol@nvidia.com | finished in 3h39m0s |
| 2025-10-20 11:20 UTC | Re: [syzbot] [net?] WARNING in xfrm6_tunnel_net_exit (4) | 1 | wangliang74@huawei.com | finished in 5m0s |
| 2025-10-20 11:05 UTC | Re: [syzbot] [net?] WARNING in xfrm_state_fini (4) | 1 | wangliang74@huawei.com | finished in 3h44m0s |
| 2025-10-20 07:37 UTC | fix poll behaviour for TCP-based tunnel protocols | 2 | ralf@mandelbit.com | finished in 4h11m0s |
| 2025-10-20 02:49 UTC | net: key: Validate address family in set_ipsecrequest() | 1 | ssrane_b23@ee.vjti.ac.in | skipped |
| 2025-10-19 18:14 UTC | net: key: Validate address family in set_ipsecrequest() | 1 | ssrane_b23@ee.vjti.ac.in | finished in 3h41m0s |
| 2025-10-19 02:34 UTC | key: No support for family zero | 1 | eadavis@qq.com | finished in 3h39m0s |
| 2025-10-16 10:39 UTC | xfrm: misc fixes | 1 | sd@queasysnail.net | finished in 4h20m0s |
| 2025-10-13 09:58 UTC | net: cxgb4/ch_ipsec: fix potential use-after-free in ch_ipsec_xfrm_add_state() callback | 3 | pavel.zhigulin@kaspersky.com | finished in 52m0s |
| 2025-10-06 13:47 UTC | net: cxgb4/ch_ipsec: fix potential use-after-free in ch_ipsec_xfrm_add_state() callback | 2 | pavel.zhigulin@kaspersky.com | finished in 45m0s |
| 2025-10-01 11:16 UTC | net: fix potential use-after-free in ch_ipsec_xfrm_add_state() callback | 1 | pavel.zhigulin@kaspersky.com | finished in 40m0s |
| 2025-09-26 05:30 UTC | pull request (net-next): ipsec-next 2025-09-26 | 1 | steffen.klassert@secunet.com | finished in 3h39m0s |
| 2025-09-22 07:34 UTC | pull request (net): ipsec 2025-09-22 | 1 | steffen.klassert@secunet.com | finished in 3h42m0s |
| 2025-09-21 02:27 UTC | net/xfrm: Refuse to allocate xfrm_state with SPI value 0 | 1 | zlatistiv@gmail.com | finished in 3h40m0s |
| 2025-09-18 07:19 UTC | net/mlx5e: Support RSS for IPSec offload | 1 | tariqt@nvidia.com | finished in 43m0s |
| 2025-09-10 15:22 UTC | xfrm: fix offloading of cross-family tunnels | 2 | sd@queasysnail.net | finished in 3h44m0s |
| 2025-09-05 16:58 UTC | ipv6: snmp: avoid performance issue with RATELIMITHOST | 2 | edumazet@google.com | finished in 4h9m0s |
| 2025-08-29 08:54 UTC | xfrm: xfrm_alloc_spi shouldn't use 0 as SPI | 1 | sd@queasysnail.net | finished in 3h40m0s |
| 2025-08-26 16:25 UTC | Reference Counting Vulnerability in Linux XFRM PolicyManagement | 1 | qianjiaru77@gmail.com | finished in 49m0s |
| 2025-08-25 13:37 UTC | ipv4: Convert ->flowi4_tos to dscp_t. | 2 | gnault@redhat.com | finished in 3h52m0s |
| 2025-08-25 12:50 UTC | xfrm: fix offloading of cross-family tunnels | 1 | sd@queasysnail.net | finished in 3h42m0s |
| 2025-08-20 23:32 UTC | ipv4: Convert ->flowi4_tos to dscp_t. | 1 | gnault@redhat.com | finished in 3h42m0s |
| 2025-08-18 15:40 UTC | net: Convert to skb_dstref_steal and skb_dstref_restore | 2 | sdf@fomichev.me |
finished
in 3h50m0s
[1 findings] |
| 2025-08-14 19:32 UTC | xfrm: xfrm_user: use strscpy() for alg_name | 1 | miguelgarciaroman8@gmail.com | finished in 3h49m0s |
| 2025-08-12 15:52 UTC | net: Convert to skb_dst_reset and skb_dst_restore | 1 | sdf@fomichev.me |
finished
in 3h46m0s
[1 findings] |
| 2025-08-12 15:51 UTC | net: ipv6: fix field-spanning memcpy warning in AH output | 3 | charmitro@posteo.net | finished in 3h50m0s |
| 2025-08-11 09:19 UTC | pull request (net): ipsec 2025-08-11 | 1 | steffen.klassert@secunet.com | finished in 3h51m0s |
| 2025-08-04 09:26 UTC | xfrm: some fixes for GSO with SW crypto | 2 | sd@queasysnail.net | finished in 4h37m0s |
| 2025-08-04 09:05 UTC | xfrm: flush all states in xfrm_state_fini | 1 | sd@queasysnail.net | finished in 4h34m0s |
| 2025-07-28 15:17 UTC | xfrm: some fixes for GSO with SW crypto | 1 | sd@queasysnail.net | finished in 3h48m0s |
| 2025-07-27 21:51 UTC | net: ipv6: fix buffer overflow in AH output | 2 | charmitro@posteo.net | finished in 3h42m0s |
| 2025-07-27 21:48 UTC | net: ipv6: fix buffer overflow in AH output | 1 | charmitro@posteo.net | finished in 3h44m0s |
| 2025-07-23 08:03 UTC | pull request (net-next): ipsec-next 2025-07-23 | 1 | steffen.klassert@secunet.com | finished in 3h49m0s |