summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2026-07-24audit: add audit_log_nf_skb helper functionRicardo Robaina2-114/+2
2026-07-24ipvs: fix more places with wrong ipv6 transport offsetsJulian Anastasov2-8/+5
2026-07-24ipvs: reset full ip_vs_seq structs in ip_vs_conn_newYizhou Zhao1-2/+2
2026-07-24ipvs: use parsed transport offset in SCTP state lookupYizhou Zhao1-10/+5
2026-07-24netfilter: xt_nat: reject unsupported target familiesWyatt Feng1-0/+9
2026-07-24netfilter: nf_conncount: fix zone comparison in tuple dedupYizhou Zhao1-3/+3
2026-07-24netfilter: nf_nat_sip: reload possible stale data pointerFlorian Westphal1-0/+9
2026-07-24netfilter: xt_cluster: reject template conntracks in hash matchWyatt Feng1-1/+1
2026-07-24netfilter: nfnl_cthelper: apply per-class values when updating policiesDavid Carlier1-2/+2
2026-07-24netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB readMuhammad Bilal1-3/+3
2026-07-24ipvs: ensure inner headers in ICMP errors are in headroomJulian Anastasov1-6/+15
2026-07-24ipvs: fix PMTU for GUE/GRE tunnel ICMP errorsYizhou Zhao1-3/+3
2026-07-24ipvs: use parsed transport offset in TCP state lookupYizhou Zhao1-7/+1
2026-07-24ipvs: pass parsed transport offset to state handlersYizhou Zhao4-8/+11
2026-07-24netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()Feng Wu1-1/+1
2026-07-24netfilter: xt_u32: reject invalid shift countsWyatt Feng1-1/+11
2026-07-24netfilter: nft_synproxy: stop bypassing the priv->info snapshotRunyu Xiao1-5/+4
2026-07-24netfilter: nf_conncount: prevent connlimit drops for early confirmed ctFernando Fernandez Mancera1-6/+5
2026-07-24netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()Jozsef Kadlecsik1-2/+2
2026-07-24netfilter: nf_conncount: callers must hold rcu read lockFlorian Westphal1-3/+3
2026-07-24netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptpPablo Neira Ayuso1-2/+16
2026-07-24netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lockFernando Fernandez Mancera1-0/+2
2026-07-24netfilter: nfnetlink_osf: fix mss parsing on big-endian architecturesFernando Fernandez Mancera1-5/+1
2026-07-24netfilter: ipset: fix race between dump and ip_set_list resizeXiang Mei1-1/+7
2026-06-19netfilter: nft_fib: fix stale stack leak via the OIFNAME registerDavide Ornaghi1-0/+6
2026-06-19use less confusing names for iov_iter direction initializersAl Viro1-1/+1
2026-06-19netfilter: nf_queue: hold bridge skb->dev while queuedHaoze Xie2-1/+5
2026-06-19net: Remove redundant if statementsYajun Deng1-16/+8
2026-06-19ipvs: skip ipv6 extension headers for csum checksJulian Anastasov3-39/+20
2026-06-19netfilter: nft_tunnel: fix use-after-free on object destroyTristan Madani1-1/+1
2026-06-19netfilter: nft_exthdr: fix register tracking for F_PRESENT flagFlorian Westphal1-0/+3
2026-06-19netfilter: conntrack_irc: fix possible out-of-bounds readFlorian Westphal1-2/+2
2026-06-19netfilter: synproxy: add mutex to guard hook reference countingFernando Fernandez Mancera1-6/+18
2026-06-19ipvs: clear the svc scheduler ptr early on editJulian Anastasov2-12/+15
2026-06-19netfilter: xt_NFQUEUE: prefer raw_smp_processor_idFernando Fernandez Mancera1-1/+1
2026-06-19netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without dire...Hamza Mahfooz1-1/+2
2026-06-19netfilter: xt_cpu: prefer raw_smp_processor_idFlorian Westphal1-1/+1
2026-06-19netfilter: synproxy: refresh tcphdr after skb_ensure_writableChris Mason1-0/+2
2026-06-01netfilter: ipset: stop hash:* range iteration at endNan Li4-4/+17
2026-06-01netfilter: nft_ct: fix missing expect put in obj evalLi Xiasong1-0/+2
2026-06-01netfilter: skip recording stale or retransmitted INITXin Long1-3/+7
2026-06-01netfilter: nf_conntrack_sip: don't use simple_strtoulFlorian Westphal2-34/+119
2026-06-01netfilter: xt_policy: fix strict mode inbound policy matchingJiexun Wang1-1/+1
2026-06-01netfilter: nfnetlink_osf: fix potential NULL dereference in ttl checkFernando Fernandez Mancera1-15/+7
2026-06-01netfilter: nfnetlink_osf: fix out-of-bounds read on option matchingFernando Fernandez Mancera1-11/+8
2026-06-01ipvs: fix MTU check for GSO packets in tunnel modeYingnan Zhang1-4/+15
2026-06-01netfilter: xtables: restrict several matches to inet familyPablo Neira Ayuso4-34/+68
2026-06-01netfilter: conntrack: remove sprintf usageFlorian Westphal2-16/+19
2026-06-01netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULOXiang Mei1-0/+4
2026-06-01netfilter: nft_osf: restrict it to ipv4Pablo Neira Ayuso1-1/+5
generated by cgit v1.2.3 (git 2.39.0) at 2026-08-08 14:31:29 +0300