Subject	Netfilter fixes for net
Author	pablo@netfilter.org
Date	2026-06-19 11:54:36 +0000 UTC
Version	Version 1 Version 1 Version 1 Version 1 Version 1 Version 1 Version 1 Version 1 Version 1
Cc	davem@davemloft.net edumazet@google.com fw@strlen.de horms@kernel.org kuba@kernel.org netdev@vger.kernel.org netfilter-devel@vger.kernel.org pabeni@redhat.com pablo@netfilter.org

Patches (16)

Name	Content [All]
[PATCH net 01/16] netfilter: flowtable: fix offloaded ct timeout never being extended	[Body]
[PATCH net 02/16] netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst	[Body]
[PATCH net 03/16] netfilter: xt_cluster: reject template conntracks in hash match	[Body]
[PATCH net 04/16] netfilter: flowtable: fix and simplify IP6IP6 tunnel handling	[Body]
[PATCH net 05/16] netfilter: nfnetlink: make OOM conditions fatal	[Body]
[PATCH net 06/16] netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types	[Body]
[PATCH net 07/16] netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types	[Body]
[PATCH net 08/16] netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()	[Body]
[PATCH net 09/16] netfilter: ipset: make sure gc is properly stopped	[Body]
[PATCH net 10/16] netfilter: nft_payload: reject offsets exceeding 65535 bytes	[Body]
[PATCH net 11/16] netfilter: nft_meta_bridge: add validate callback for get operations	[Body]
[PATCH net 12/16] netfilter: nft_flow_offload: zero device address for non-ether case	[Body]
[PATCH net 13/16] netfilter: nf_reject: skip iphdr options when looking for icmp header	[Body]
[PATCH net 14/16] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations	[Body]
[PATCH net 15/16] netfilter: nf_conntrack_expect: store master_tuple in expectation	[Body]
[PATCH net 16/16] netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak	[Body]

Sessions