kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
4 days	netfilter: nf_conncount: update last_gc only when GC has been performed	Fernando Fernandez Mancera	1	-1/+1
4 days	netfilter: nft_synproxy: avoid possible data-race on update operation	Fernando Fernandez Mancera	1	-3/+3
4 days	ipvs: fix ipv4 null-ptr-deref in route error path	Slavin Liu	1	-0/+3
4 days	netfilter: nf_conncount: fix leaked ct in error paths	Fernando Fernandez Mancera	1	-11/+14
4 days	netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails	Pablo Neira Ayuso	1	-1/+10
4 days	netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap ...	Nicklas Bo Jensen	1	-2/+2
4 days	netfilter: nft_connlimit: update the count if add was skipped	Fernando Fernandez Mancera	2	-6/+19
4 days	netfilter: nf_conncount: rework API to use sk_buff directly	Fernando Fernandez Mancera	3	-86/+126
4 days	netfilter: nf_conncount: reduce unnecessary GC	William Tu	1	-0/+11
4 days	netfilter: nft_connlimit: move stateful fields out of expression data	Pablo Neira Ayuso	1	-8/+18
2025-12-07	netfilter: nf_set_pipapo_avx2: fix initial map fill	Florian Westphal	1	-1/+20
2025-12-07	netfilter: nf_set_pipapo: fix initial map fill	Florian Westphal	3	-6/+29
2025-12-07	netfilter: nf_tables: reject duplicate device on updates	Pablo Neira Ayuso	1	-0/+15
2025-10-29	minmax: add in_range() macro	Matthew Wilcox (Oracle)	1	-3/+3
2025-10-29	ipvs: Defer ip_vs_ftp unregister during netns cleanup	Slavin Liu	1	-1/+3
2025-10-29	netfilter: ipset: Remove unused htable_bits in macro ahash_region	Zhen Ni	1	-4/+4
2025-09-09	netfilter: conntrack: helper: Replace -EEXIST by -EBUSY	Phil Sutter	1	-2/+2
2025-08-28	netfilter: nft_reject_inet: allow to use reject from inet ingress	Pablo Neira Ayuso	1	-1/+13
2025-08-28	netfilter: nft_reject: unify reject init and dump into nft_reject	Jose M. Guisado Gomez	2	-59/+13
2025-08-28	netfilter: ctnetlink: fix refcount leak on table dump	Florian Westphal	1	-11/+13
2025-08-28	netfilter: xt_nfacct: don't assume acct name is null-terminated	Florian Westphal	1	-2/+2
2025-08-28	netfilter: nf_tables: adjust lockdep assertions handling	Fedor Pchelkin	1	-2/+2
2025-06-27	netfilter: nft_tunnel: fix geneve_opt dump	Fernando Fernandez Mancera	1	-4/+4
2025-06-27	netfilter: nft_socket: fix sk refcount leaks	Florian Westphal	1	-2/+3
2025-06-04	netfilter: conntrack: Bound nf_conntrack sysctl writes	Nicolas Bouchinet	1	-3/+9
2025-06-04	netfilter: nf_tables: do not defer rule destruction via call_rcu	Florian Westphal	1	-17/+15
2025-06-04	netfilter: nf_tables: wait for rcu grace period on net_device removal	Pablo Neira Ayuso	1	-7/+34
2025-06-04	netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx	Florian Westphal	2	-10/+9
2025-06-04	netfilter: ipset: fix region locking in hash types	Jozsef Kadlecsik	1	-1/+1
2025-05-02	ipvs: properly dereference pe in ip_vs_add_service	Chen Hanxiao	1	-5/+5
2025-05-02	nft_set_pipapo: fix incorrect avx2 match of 5th field octet	Florian Westphal	1	-1/+2
2025-04-10	netfilter: conntrack: fix crash due to confirmed bit load reordering	Florian Westphal	3	-0/+26
2025-04-10	net: fix geneve_opt length integer overflow	Lin Ma	1	-1/+1
2025-04-10	netfilter: nft_tunnel: fix geneve_opt type confusion addition	Lin Ma	1	-2/+2
2025-04-10	netfilter: nft_exthdr: fix offset with ipv4_find_option()	Alexey Kashavkin	1	-6/+4
2025-04-10	ipvs: prevent integer overflow in do_ip_vs_get_ctl()	Dan Carpenter	1	-4/+4
2025-04-10	netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert...	Kohei Enju	1	-0/+2
2025-04-10	netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.	Sebastian Andrzej Siewior	1	-2/+4
2025-04-10	netfilter: nft_ct: fix use after free when attaching zone template	Florian Westphal	1	-1/+4
2025-04-10	netfilter: conntrack: convert to refcount_t api	Florian Westphal	8	-27/+23
2025-03-13	netfilter: nf_tables: reject mismatching sum of field_len with set key length	Pablo Neira Ayuso	1	-4/+4
2025-02-01	netfilter: conntrack: clamp maximum hashtable size to INT_MAX	Pablo Neira Ayuso	1	-1/+4
2025-02-01	netfilter: nf_tables: imbalance in flowtable binding	Pablo Neira Ayuso	1	-4/+11
2025-02-01	netfilter: nft_dynset: honor stateful expressions in set definition	Pablo Neira Ayuso	2	-1/+29
2025-01-09	netfilter: ipset: Fix for recursive locking warning	Phil Sutter	1	-0/+3
2024-12-14	netfilter: nft_set_hash: skip duplicated elements pending gc run	Pablo Neira Ayuso	1	-0/+16
2024-12-14	netfilter: ipset: Hold module reference while requesting a module	Phil Sutter	1	-0/+5
2024-12-14	netfilter: x_tables: fix LED ID check in led_tg_check()	Dmitry Antipov	1	-1/+3
2024-12-14	ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()	Jinghao Jia	1	-3/+1
2024-12-14	netfilter: ipset: add missing range check in bitmap_ip_uadt	Jeongjun Park	1	-5/+2