summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
10 daysnetfilter: ipset: fix list type element drift bugFlorian Westphal1-2/+5
10 daysnetfilter: flowtable: publish GC-visible tuple lastJérémy Jean1-3/+4
10 daysnetfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort pathAlexey Velichayshiy1-1/+1
10 daysnetfilter: ipset: fix refcount race between list:set GC and swapXiang Mei (Microsoft)1-6/+13
10 daysnetfilter: nft_set_pipapo: don't leak bad clone into future transactionFlorian Westphal2-5/+37
10 daysnetfilter: nft_set_pipapo: move cloning of match info to insert/removal pathFlorian Westphal1-21/+49
10 daysnetfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand cloneFlorian Westphal1-10/+15
10 daysnetfilter: nft_set_pipapo: merge deactivate helper into callerFlorian Westphal1-30/+9
10 daysnetfilter: nft_set_pipapo: prepare walk function for on-demand cloneFlorian Westphal1-21/+39
10 daysnetfilter: nft_set_pipapo: make pipapo_clone helper return NULLFlorian Westphal1-7/+7
10 daysnetfilter: nf_conntrack_sip: validate skb_dst() before accessing itPablo Neira Ayuso1-2/+5
10 daysnetfilter: nf_conntrack_sip: remove net variable shadowingFlorian Westphal1-2/+1
10 daysnetfilter: nft_set_pipapo: move prove_locking helper aroundFlorian Westphal1-11/+11
10 daysnetfilter: nft_set_pipapo: use GFP_KERNEL for insertionsFlorian Westphal1-7/+11
10 daysnetfilter: nf_queue: pin bridge device while NFQUEUE holds fake dstHaoze Xie2-0/+17
10 daysipvs: separate destination availability stateYizhou Zhao6-14/+14
13 daysipvs: clear IPv4 options after rebasing tunnel ICMP errorsKyle Zeng1-0/+1
13 daysipvs: properly update the overload flag on dest editJulian Anastasov2-25/+69
13 daysipvs: add totalconns for destJulian Anastasov6-33/+16
13 daysnetfilter: ipset: do not update comments from kernel-side hash addsDavid Lee1-1/+1
13 daysipvs: do not propagate one-packet flag to synced connsZhiling Zou1-0/+3
13 daysnetfilter: nft_payload: fix mask build for partial field offloadXiang Mei (Microsoft)1-11/+1
13 daysnetfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCHPablo Neira Ayuso1-1/+15
13 daysnetfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()Xiang Mei2-2/+2
2026-07-24audit: add audit_log_nf_skb helper functionRicardo Robaina2-114/+2
2026-07-24ipvs: fix more places with wrong ipv6 transport offsetsJulian Anastasov2-8/+5
2026-07-24ipvs: reset full ip_vs_seq structs in ip_vs_conn_newYizhou Zhao1-2/+2
2026-07-24ipvs: use parsed transport offset in SCTP state lookupYizhou Zhao1-10/+5
2026-07-24netfilter: xt_nat: reject unsupported target familiesWyatt Feng1-0/+9
2026-07-24netfilter: nf_conncount: fix zone comparison in tuple dedupYizhou Zhao1-3/+3
2026-07-24netfilter: nf_nat_sip: reload possible stale data pointerFlorian Westphal1-0/+9
2026-07-24netfilter: xt_cluster: reject template conntracks in hash matchWyatt Feng1-1/+1
2026-07-24netfilter: nfnl_cthelper: apply per-class values when updating policiesDavid Carlier1-2/+2
2026-07-24netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB readMuhammad Bilal1-3/+3
2026-07-24ipvs: ensure inner headers in ICMP errors are in headroomJulian Anastasov1-6/+15
2026-07-24ipvs: fix PMTU for GUE/GRE tunnel ICMP errorsYizhou Zhao1-3/+3
2026-07-24ipvs: use parsed transport offset in TCP state lookupYizhou Zhao1-7/+1
2026-07-24ipvs: pass parsed transport offset to state handlersYizhou Zhao4-8/+11
2026-07-24netfilter: xt_connmark: reject invalid shift parametersWyatt Feng1-2/+12
2026-07-24netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()Feng Wu1-1/+1
2026-07-24netfilter: xt_u32: reject invalid shift countsWyatt Feng1-1/+11
2026-07-24netfilter: nft_synproxy: stop bypassing the priv->info snapshotRunyu Xiao1-5/+4
2026-07-24netfilter: nf_conncount: prevent connlimit drops for early confirmed ctFernando Fernandez Mancera1-6/+5
2026-07-24netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()Jozsef Kadlecsik1-2/+2
2026-07-24netfilter: nf_conncount: callers must hold rcu read lockFlorian Westphal1-3/+3
2026-07-24netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptpPablo Neira Ayuso1-2/+16
2026-07-24netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lockFernando Fernandez Mancera1-0/+2
2026-07-24netfilter: nfnetlink_osf: fix mss parsing on big-endian architecturesFernando Fernandez Mancera1-5/+1
2026-07-24netfilter: ipset: fix race between dump and ip_set_list resizeXiang Mei1-1/+7
2026-07-24netfilter: nf_tables: restore set elements when delete set failsPablo Neira Ayuso5-20/+42
generated by cgit v1.2.3 (git 2.39.0) at 2026-09-02 05:15:14 +0300