kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
27 hours	netfilter: nft_fib: fix stale stack leak via the OIFNAME register	Davide Ornaghi	1	-0/+6
27 hours	use less confusing names for iov_iter direction initializers	Al Viro	1	-1/+1
27 hours	netfilter: nf_queue: hold bridge skb->dev while queued	Haoze Xie	2	-1/+5
27 hours	net: Remove redundant if statements	Yajun Deng	1	-16/+8
27 hours	ipvs: skip ipv6 extension headers for csum checks	Julian Anastasov	3	-39/+20
27 hours	netfilter: nft_tunnel: fix use-after-free on object destroy	Tristan Madani	1	-1/+1
27 hours	netfilter: nft_exthdr: fix register tracking for F_PRESENT flag	Florian Westphal	1	-0/+3
27 hours	netfilter: conntrack_irc: fix possible out-of-bounds read	Florian Westphal	1	-2/+2
27 hours	netfilter: synproxy: add mutex to guard hook reference counting	Fernando Fernandez Mancera	1	-6/+18
27 hours	ipvs: clear the svc scheduler ptr early on edit	Julian Anastasov	2	-12/+15
27 hours	netfilter: xt_NFQUEUE: prefer raw_smp_processor_id	Fernando Fernandez Mancera	1	-1/+1
27 hours	netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without dire...	Hamza Mahfooz	1	-1/+2
27 hours	netfilter: xt_cpu: prefer raw_smp_processor_id	Florian Westphal	1	-1/+1
27 hours	netfilter: synproxy: refresh tcphdr after skb_ensure_writable	Chris Mason	1	-0/+2
2026-06-01	netfilter: ipset: stop hash:* range iteration at end	Nan Li	4	-4/+17
2026-06-01	netfilter: nft_ct: fix missing expect put in obj eval	Li Xiasong	1	-0/+2
2026-06-01	netfilter: skip recording stale or retransmitted INIT	Xin Long	1	-3/+7
2026-06-01	netfilter: nf_conntrack_sip: don't use simple_strtoul	Florian Westphal	2	-34/+119
2026-06-01	netfilter: xt_policy: fix strict mode inbound policy matching	Jiexun Wang	1	-1/+1
2026-06-01	netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check	Fernando Fernandez Mancera	1	-15/+7
2026-06-01	netfilter: nfnetlink_osf: fix out-of-bounds read on option matching	Fernando Fernandez Mancera	1	-11/+8
2026-06-01	ipvs: fix MTU check for GSO packets in tunnel mode	Yingnan Zhang	1	-4/+15
2026-06-01	netfilter: xtables: restrict several matches to inet family	Pablo Neira Ayuso	4	-34/+68
2026-06-01	netfilter: conntrack: remove sprintf usage	Florian Westphal	2	-16/+19
2026-06-01	netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO	Xiang Mei	1	-0/+4
2026-06-01	netfilter: nft_osf: restrict it to ipv4	Pablo Neira Ayuso	1	-1/+5
2026-06-01	netfilter: nft_fwd_netdev: check ttl/hl before forwarding	Florian Westphal	1	-0/+10
2026-06-01	netfilter: reject zero shift in nft_bitwise	Kai Ma	1	-1/+2
2026-06-01	netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR	Florian Westphal	1	-6/+15
2026-06-01	netfilter: conntrack: add missing netlink policy validations	Florian Westphal	2	-2/+3
2026-06-01	netfilter: xt_multiport: validate range encoding in checkentry	Ren Wei	1	-4/+30
2026-06-01	netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator	Xiang Mei	1	-4/+4
2026-06-01	netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry	Florian Westphal	1	-10/+10
2026-04-18	netfilter: nft_ct: fix use-after-free in timeout object destroy	Tuan Do	1	-1/+1
2026-04-18	netfilter: ipset: drop logically empty buckets in mtype_del	Yifan Wu	1	-1/+1
2026-04-18	netfilter: nf_tables: reject immediate NF_QUEUE verdict	Pablo Neira Ayuso	1	-2/+5
2026-04-18	netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for N...	Pablo Neira Ayuso	1	-0/+23
2026-04-18	netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent	Qi Tang	1	-0/+6
2026-04-18	netfilter: nf_conntrack_helper: pass helper to expect cleanup	Qi Tang	1	-1/+1
2026-04-18	netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr	Florian Westphal	2	-4/+4
2026-04-18	netfilter: x_tables: ensure names are nul-terminated	Florian Westphal	2	-0/+11
2026-04-18	netfilter: nfnetlink_log: account for netlink header size	Florian Westphal	1	-1/+1
2026-04-18	netfilter: ctnetlink: use netlink policy range checks	David Carlier	2	-18/+8
2026-04-18	netlink: introduce bigendian integer types	Florian Westphal	1	-3/+3
2026-04-18	netfilter: nft_payload: reject out-of-range attributes via policy	Florian Westphal	1	-3/+3
2026-04-18	netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp	Weiming Shi	1	-4/+10
2026-04-18	netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD	Weiming Shi	1	-6/+2
2026-04-18	netfilter: nft_set_pipapo: split gc into unlink and reclaim phase	Florian Westphal	3	-15/+35
2026-04-18	nfnetlink_osf: validate individual option lengths in fingerprints	Weiming Shi	1	-0/+13
2026-04-18	netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()	Jenny Guanni Qu	1	-0/+2