| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-09-26 18:03 UTC | net/sched: fq_codel: match the no-drop threshold to the packet size | 1 | jhs@mojatatu.com | - |
| 2026-09-26 17:49 UTC | net/sched: cap the accounted backlog before it can wrap | 2 | jhs@mojatatu.com | - |
| 2026-09-25 08:53 UTC | net/sched: fq_codel, cake: widen backlogs to u64 | 1 | jhs@mojatatu.com | - |
| 2026-09-24 12:18 UTC | net/sched: cls_flower: exact-match ERSPAN key when no mask supplied | 2 | jhs@mojatatu.com | in progress |
| 2026-09-24 11:49 UTC | net: cap skb->queue_mapping when the tx queue is picked | 2 | jhs@mojatatu.com | in progress |
| 2026-09-24 08:32 UTC | net/sched: cls_api: reclaim an empty proto on the error path | 1 | jhs@mojatatu.com | finished in 3h57m0s |
| 2026-09-21 14:02 UTC | net: cap skb->queue_mapping when the tx queue is picked | 1 | jhs@mojatatu.com | finished in 4h13m0s |
| 2026-09-20 17:07 UTC | net/sched: act_gate: budget the per-entry list in get_fill_size | 1 | victor@mojatatu.com | finished in 4h18m0s |
| 2026-09-19 23:04 UTC | net/sched: complete action notification accounting | 1 | victor@mojatatu.com | finished in 4h15m0s |
| 2026-09-19 09:51 UTC | net/sched: cls_flower: exact-match ERSPAN key when no mask supplied | 1 | jhs@mojatatu.com | finished in 4h8m0s |
| 2026-09-18 13:51 UTC | net/sched: Avoid quadratic handle scan in qdisc_alloc_handle | 3 | victor@mojatatu.com | finished in 3h56m0s |
| 2026-09-17 12:47 UTC | net/sched: Avoid quadratic handle scan in qdisc_alloc_handle | 2 | victor@mojatatu.com | finished in 4h9m0s |
| 2026-09-17 10:57 UTC | net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget | 3 | jhs@mojatatu.com | finished in 4h8m0s |
| 2026-09-16 10:01 UTC | net/sched: cls_u32: fix manual hash table handle IDR aliasing | 1 | jhs@mojatatu.com | finished in 4h3m0s |
| 2026-09-14 08:06 UTC | net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget | 2 | jhs@mojatatu.com | finished in 4h42m0s |
| 2026-09-12 18:10 UTC | net/sched: sch_hfsc: bound the classify inner-filter walk | 1 | jhs@mojatatu.com | finished in 4h32m0s |
| 2026-09-12 18:09 UTC | net/sched: hhf: cap hh_flows_limit at change time | 1 | jhs@mojatatu.com | finished in 4h2m0s |
| 2026-09-12 18:08 UTC | net/sched: codel: bound the dropping loop per dequeue call | 1 | jhs@mojatatu.com | finished in 4h42m0s |
| 2026-09-11 13:31 UTC | net/sched: Avoid quadratic handle scan in qdisc_alloc_handle | 1 | victor@mojatatu.com | finished in 3h59m0s |
| 2026-09-07 19:21 UTC | net/sched: cls_route: fix bucket retention and handle recomputation | 2 | victor@mojatatu.com | finished in 4h35m0s |
| 2026-09-03 20:56 UTC | net/sched: codel: bound the dropping loop per dequeue call | 1 | jhs@mojatatu.com | finished in 4h30m0s |
| 2026-09-03 10:36 UTC | selftests/tc-testing: pass mp_pm via initialiser | 2 | fw@strlen.de | skipped |
| 2026-09-01 21:39 UTC | net/sched: clamp quantum/psched_mtu in change paths | 3 | jhs@mojatatu.com | finished in 4h26m0s |
| 2026-08-29 20:54 UTC | net/sched: cls_route: free emptied bucket on filter move | 1 | victor@mojatatu.com | finished in 4h24m0s |
| 2026-08-29 08:12 UTC | net/sched: clamp quantum/psched_mtu in change paths | 2 | jhs@mojatatu.com | finished in 3h55m0s |
| 2026-08-28 12:19 UTC | net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations | 1 | jhs@mojatatu.com | finished in 5h53m0s |
| 2026-08-26 14:33 UTC | net/sched: sch_htb: limit htb_classify inner-class filter hops | 2 | victor@mojatatu.com | finished in 4h14m0s |
| 2026-08-26 07:40 UTC | net/sched: clamp quantum and psched_mtu in change paths and missed siblings | 1 | jhs@mojatatu.com | finished in 4h0m0s |
| 2026-08-25 08:17 UTC | net/sched: pfifo_fast: reject oversized ring and account to memcg | 2 | jhs@mojatatu.com | finished in 4h36m0s |
| 2026-08-25 08:14 UTC | net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup | 2 | jhs@mojatatu.com | finished in 4h41m0s |
| 2026-08-25 08:10 UTC | net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted | 3 | jhs@mojatatu.com | finished in 4h37m0s |
| 2026-08-24 16:18 UTC | net/sched: sch_htb: limit htb_classify inner-class filter hops | 1 | victor@mojatatu.com | finished in 4h39m0s |
| 2026-08-24 15:39 UTC | net/sched: Fix remaining actions notification accounting issues | 1 | victor@mojatatu.com | finished in 5h7m0s |
| 2026-08-24 11:59 UTC | net/sched: sch_teql: restore skb->dev on the slave failure path | 1 | victor@mojatatu.com | finished in 4h55m0s |
| 2026-08-23 18:22 UTC | net/sched: act_skbmod: fix length calculations and avoid invalid header warnings | 1 | edumazet@google.com | finished in 4h34m0s |
| 2026-08-22 19:55 UTC | net: sched: fix quantum/mtu overflow in fq, fq_codel, sch_codel, fq_pie, hhf, sfq | 3 | jhs@mojatatu.com | finished in 3h57m0s |
| 2026-08-21 16:40 UTC | net/sched: act_ife: Only operate on Ethernet frames | 2 | victor@mojatatu.com | finished in 4h30m0s |
| 2026-08-20 09:57 UTC | net/sched: pfifo_fast: cap ring size and account to memcg | 1 | jhs@mojatatu.com | finished in 4h3m0s |
| 2026-08-20 09:52 UTC | net/sched: cls_u32: fix duplicate handle when node id pool exhausted | 1 | jhs@mojatatu.com | finished in 3h57m0s |
| 2026-08-19 20:42 UTC | net/sched: reset conntrack after packet munging | 1 | fw@strlen.de | finished in 4h2m0s |
| 2026-08-19 14:37 UTC | net/sched: account classifier filter allocations to memcg | 1 | jhs@mojatatu.com | finished in 4h8m0s |
| 2026-08-19 14:32 UTC | net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup | 2 | jhs@mojatatu.com | finished in 4h3m0s |
| 2026-08-19 14:31 UTC | net: sched: fix quantum/backlog overflow in fq, fq_codel, fq_pie, hhf, sfq | 2 | jhs@mojatatu.com | finished in 4h27m0s |
| 2026-08-18 10:17 UTC | net/sched: bound TCA_STAB overhead to prevent qdisc soft lockup | 1 | jhs@mojatatu.com | finished in 4h56m0s |
| 2026-08-18 10:11 UTC | net: sched: fix quantum/backlog overflow in fq, fq_codel, hhf, sfq | 1 | jhs@mojatatu.com | finished in 4h21m0s |
| 2026-08-18 09:59 UTC | net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue | 2 | jhs@mojatatu.com | finished in 4h39m0s |
| 2026-08-16 20:13 UTC | net/sched: add get_fill_size callbacks for actions missing them | 2 | victor@mojatatu.com | finished in 4h23m0s |
| 2026-08-10 16:43 UTC | net/sched: add get_fill_size callbacks for actions missing them | 1 | victor@mojatatu.com | finished in 4h45m0s |
| 2026-08-10 14:42 UTC | net/sched: act_ife: use mac_len for ingress header offset | 1 | victor@mojatatu.com | finished in 4h16m0s |
| 2026-08-09 09:44 UTC | net/sched: cls_bpf: reject dev-bound programs bound to a different device | 1 | jhs@mojatatu.com | finished in 4h10m0s |
| 2026-08-09 09:16 UTC | net: sched: gred: fix 32-bit backlog wrap in gred_enqueue | 1 | jhs@mojatatu.com | finished in 4h19m0s |
| 2026-08-09 09:09 UTC | net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain | 1 | jhs@mojatatu.com | finished in 4h34m0s |
| 2026-08-09 09:07 UTC | net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain | 1 | jhs@mojatatu.com | finished in 4h23m0s |
| 2026-08-07 13:31 UTC | net/sched: sch_teql: restore skb->dev on the slave failure path | 1 | victor@mojatatu.com | finished in 4h22m0s |
| 2026-08-05 13:40 UTC | net/sched: cls_api: fix teardown of an adopted proto on insert-race loss | 1 | victor@mojatatu.com | finished in 4h45m0s |
| 2026-08-01 12:56 UTC | net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers | 1 | jhs@mojatatu.com | finished in 4h13m0s |
| 2026-07-29 09:44 UTC | net/sched: cls_route: fix fastmap use-after-free on filter | 1 | jhs@mojatatu.com | finished in 4h33m0s |
| 2026-07-24 19:24 UTC | net/sched: cls_route: fix fastmap use-after-free and preserve netns teardown ordering | 2 | jhs@mojatatu.com | finished in 5h16m0s |
| 2026-07-23 10:52 UTC | net/sched: cls_route: fix fastmap use-after-free on filter | 1 | jhs@mojatatu.com | finished in 6h4m0s |
| 2026-07-23 04:49 UTC | net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds | 2 | blbllhy@gmail.com | finished in 5h19m0s |
| 2026-07-11 15:05 UTC | net/sched: act_tunnel_key: Defer dst_release to RCU callback | 1 | jhs@mojatatu.com | finished in 5h21m0s |
| 2026-07-10 13:27 UTC | netfilter: nf_nat: recalculate TCP TS offset after SNAT port rewrite | 3 | xietangxin@h-partners.com | finished in 4h51m0s |
| 2026-07-09 13:12 UTC | netfilter: nf_nat: recalculate TCP TS offset when snat change sport | 2 | xietangxin@h-partners.com | finished in 4h57m0s |
| 2026-07-06 18:56 UTC | Fix broken TC_ACT_REDIRECT from qdiscs | 2 | daniel@iogearbox.net | finished in 5h9m0s |
| 2026-07-01 16:19 UTC | net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload | 1 | jhs@mojatatu.com | finished in 4h49m0s |
| 2026-06-30 15:36 UTC | selftests/tc-testing: Add tests that force multiq and taprio to enqueue to child's gso_skb | 1 | victor@mojatatu.com | skipped |
| 2026-06-30 15:09 UTC | net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants | 1 | jhs@mojatatu.com | finished in 2h28m0s |
| 2026-06-30 12:33 UTC | Fix broken TC_ACT_REDIRECT from qdiscs | 1 | daniel@iogearbox.net | finished in 4h20m0s |
| 2026-06-30 10:02 UTC | net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF | 4 | jhs@mojatatu.com | finished in 5h0m0s |
| 2026-06-28 11:12 UTC | net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF | 3 | jhs@mojatatu.com | finished in 4h8m0s |
| 2026-06-26 16:51 UTC | Fix broken TC_ACT_REDIRECT | 1 | jhs@mojatatu.com | finished in 5h8m0s |
| 2026-06-24 22:40 UTC | net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF | 2 | jhs@mojatatu.com | finished in 2h14m0s |
| 2026-06-23 18:42 UTC | net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF | 1 | jhs@mojatatu.com | finished in 1h52m0s |
| 2026-06-20 13:07 UTC | net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle | 1 | jhs@mojatatu.com | finished in 4h4m0s |
| 2026-06-19 15:13 UTC | net/sched: dualpi2: fix GSO backlog accounting | 3 | b1n@b1n.io | finished in 2h5m0s |
| 2026-06-19 07:31 UTC | net/sched: dualpi2: fix GSO backlog accounting | 2 | b1n@b1n.io | finished in 1h33m0s |
| 2026-06-16 22:02 UTC | net/sched: dualpi2: fix GSO backlog accounting | 1 | b1n@b1n.io | finished in 1h39m0s |
| 2026-06-13 17:42 UTC | net/sched: act_ct: preserve tc_skb_cb across defragmentation | 2 | n05ec@lzu.edu.cn | finished in 4h21m0s |
| 2026-06-11 20:58 UTC | net/sched: sch_dualpi2: Add missing module alias | 1 | victor@mojatatu.com | finished in 1h28m0s |
| 2026-06-10 19:28 UTC | Avoid mistaken parent class deactivation during peek | 1 | victor@mojatatu.com | finished in 4h44m0s |
| 2026-06-10 13:28 UTC | net/sched: sch_hfsc: Don't make class passive twice | 1 | victor@mojatatu.com | finished in 5h22m0s |
| 2026-06-10 10:18 UTC | net/sched: cls_flow: Dont expose folded kernel pointers | 1 | jhs@mojatatu.com | finished in 4h53m0s |
| 2026-06-08 18:34 UTC | net: ife: fix decode header pull handling and add selftest | 2 | n05ec@lzu.edu.cn | finished in 4h17m0s |
| 2026-06-05 21:22 UTC | net/sched: Update function name in TCQ_F_NOPARENT comment | 1 | victor@mojatatu.com | finished in 1h46m0s |
| 2026-05-31 16:08 UTC | net/sched: act_api: use RCU with deferred freeing for action lifecycle | 2 | jhs@mojatatu.com | finished in 4h2m0s |
| 2026-05-31 12:32 UTC | net/sched: fix pedit partial COW leading to page cache corruption | 5 | jhs@mojatatu.com | finished in 4h5m0s |
| 2026-05-30 11:55 UTC | net/sched: act_api: use RCU with deferred freeing for action lifecycle | 1 | jhs@mojatatu.com |
finished
in 4h10m0s
[2 findings] |
| 2026-05-30 08:06 UTC | net/sched: fix pedit partial COW leading to page cache corruption | 4 | jhs@mojatatu.com | finished in 4h5m0s |
| 2026-05-27 18:17 UTC | net/sched: fix pedit partial COW leading to page cache corruption | 3 | jhs@mojatatu.com | finished in 4h50m0s |
| 2026-05-26 15:59 UTC | net/sched: fix pedit partial COW leading to page cache corruption | 2 | jhs@mojatatu.com | finished in 4h36m0s |
| 2026-05-25 12:25 UTC | net/sched: Fix packet loops in mirred and netem | 6 | jhs@mojatatu.com | finished in 4h15m0s |
| 2026-05-22 11:03 UTC | net/sched: sch_ets: make cl->quantum lockless | 1 | edumazet@google.com | finished in 2h45m0s |
| 2026-05-21 15:08 UTC | selftests/tc-testing: Add support for ifb devices | 1 | victor@mojatatu.com | finished in 1h30m0s |
| 2026-05-21 13:14 UTC | geneve: fix Use-After-Free in RX path | 2 | jhs@mojatatu.com | finished in 4h47m0s |
| 2026-05-19 09:46 UTC | net/sched: sch_drr: lockless cl->deficit and cl->quantum | 1 | edumazet@google.com | finished in 4h55m0s |
| 2026-05-19 09:36 UTC | geneve: fix Use-After-Free in RX path | 1 | jhs@mojatatu.com | finished in 4h40m0s |
| 2026-05-18 09:05 UTC | net/sched: sch_htb: fix htb_dump_class_stats() vs offload mode | 1 | edumazet@google.com | finished in 4h38m0s |
| 2026-05-14 14:47 UTC | net/sched: Fix packet loops in mirred and netem | 5 | jhs@mojatatu.com | finished in 4h57m0s |
| 2026-05-14 11:47 UTC | net/sched: sch_dualpi2: annotate data-races in dualpi2_dump_stats() | 1 | edumazet@google.com | finished in 1h31m0s |
| 2026-05-14 09:59 UTC | net/sched: sch_htb: first round of fixes | 1 | edumazet@google.com | finished in 5h16m0s |