summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2 daysnetfilter: nf_conncount: update last_gc only when GC has been performedFernando Fernandez Mancera1-1/+1
2 daysnetfilter: nf_tables: fix memory leak in nf_tables_newrule()Zilin Guan1-1/+2
2 daysnetfilter: nft_synproxy: avoid possible data-race on update operationFernando Fernandez Mancera1-3/+3
8 daysipvs: fix ipv4 null-ptr-deref in route error pathSlavin Liu1-0/+3
8 daysnetfilter: nf_conncount: fix leaked ct in error pathsFernando Fernandez Mancera1-11/+14
8 daysnetfilter: nft_connlimit: update the count if add was skippedFernando Fernandez Mancera2-6/+19
8 daysnetfilter: nf_conncount: rework API to use sk_buff directlyFernando Fernandez Mancera3-86/+126
8 daysnetfilter: flowtable: check for maximum number of encapsulations in bridge vlanPablo Neira Ayuso1-1/+8
2025-12-07netfilter: nf_tables: reject duplicate device on updatesPablo Neira Ayuso1-0/+15
2025-10-15ipvs: Defer ip_vs_ftp unregister during netns cleanupSlavin Liu1-1/+3
2025-10-15netfilter: ipset: Remove unused htable_bits in macro ahash_regionZhen Ni1-4/+4
2025-10-02minmax: add in_range() macroMatthew Wilcox (Oracle)1-3/+3
2025-09-09netfilter: conntrack: helper: Replace -EEXIST by -EBUSYPhil Sutter1-2/+2
2025-08-28netfilter: ctnetlink: fix refcount leak on table dumpFlorian Westphal1-11/+13
2025-08-15netfilter: xt_nfacct: don't assume acct name is null-terminatedFlorian Westphal1-2/+2
2025-08-15netfilter: nf_tables: adjust lockdep assertions handlingFedor Pchelkin1-2/+2
2025-07-24netfilter: nf_conntrack: fix crash due to removal of uninitialised entryFlorian Westphal1-6/+20
2025-06-27netfilter: nf_set_pipapo_avx2: fix initial map fillFlorian Westphal1-1/+20
2025-06-27netfilter: nft_tunnel: fix geneve_opt dumpFernando Fernandez Mancera1-4/+4
2025-06-27netfilter: nft_quota: match correctly when the quota just depletedZhongqiu Duan1-7/+13
2025-06-04netfilter: conntrack: Bound nf_conntrack sysctl writesNicolas Bouchinet1-3/+9
2025-05-22netfilter: nf_tables: do not defer rule destruction via call_rcuFlorian Westphal1-17/+15
2025-05-22netfilter: nf_tables: wait for rcu grace period on net_device removalPablo Neira Ayuso1-7/+34
2025-05-22netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctxFlorian Westphal2-10/+9
2025-05-18netfilter: ipset: fix region locking in hash typesJozsef Kadlecsik1-1/+1
2025-05-18ipvs: fix uninit-value for saddr in do_output_route4Julian Anastasov1-19/+8
2025-05-18ipv4: Drop tos parameter from flowi4_update_output()Guillaume Nault1-2/+2
2025-04-25nft_set_pipapo: fix incorrect avx2 match of 5th field octetFlorian Westphal1-1/+2
2025-04-10net: fix geneve_opt length integer overflowLin Ma1-1/+1
2025-04-10netfilter: nft_tunnel: fix geneve_opt type confusion additionLin Ma1-2/+2
2025-04-10netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets onlyPablo Neira Ayuso1-1/+2
2025-03-28netfilter: nft_counter: Use u64_stats_t for statistic.Sebastian Andrzej Siewior1-44/+46
2025-03-28netfilter: nft_exthdr: fix offset with ipv4_find_option()Alexey Kashavkin1-6/+4
2025-03-28ipvs: prevent integer overflow in do_ip_vs_get_ctl()Dan Carpenter1-4/+4
2025-03-28netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert...Kohei Enju1-0/+2
2025-03-28netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap ...Nicklas Bo Jensen1-2/+2
2025-03-28netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.Sebastian Andrzej Siewior1-2/+4
2025-03-07netfilter: allow exp not to be removed in nf_ct_find_expectationXin Long3-3/+5
2025-02-21netfilter: nf_tables: reject mismatching sum of field_len with set key lengthPablo Neira Ayuso1-4/+4
2025-02-21netfilter: nft_flow_offload: update tcp state flags under lockFlorian Westphal1-5/+11
2025-01-17netfilter: conntrack: clamp maximum hashtable size to INT_MAXPablo Neira Ayuso1-1/+4
2025-01-17netfilter: nf_tables: imbalance in flowtable bindingPablo Neira Ayuso1-4/+11
2024-12-27netfilter: ipset: Fix for recursive locking warningPhil Sutter1-0/+3
2024-12-14netfilter: nft_set_hash: skip duplicated elements pending gc runPablo Neira Ayuso1-0/+16
2024-12-14netfilter: ipset: Hold module reference while requesting a modulePhil Sutter1-0/+5
2024-12-14netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup levelPablo Neira Ayuso1-1/+1
2024-12-14netfilter: x_tables: fix LED ID check in led_tg_check()Dmitry Antipov1-1/+3
2024-12-14ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()Jinghao Jia1-3/+1
2024-12-14netfilter: ipset: add missing range check in bitmap_ip_uadtJeongjun Park1-5/+2
2024-12-14netfilter: nf_tables: must hold rcu read lock while iterating object type listFlorian Westphal1-7/+6
generated by cgit v1.2.3 (git 2.39.0) at 2026-01-19 21:07:10 +0300