kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
42 hours	netfilter: ipset: stop hash:* range iteration at end	Nan Li	4	-4/+17
42 hours	netfilter: nf_queue: hold bridge skb->dev while queued	Haoze Xie	2	-1/+5
42 hours	netfilter: nft_ct: fix missing expect put in obj eval	Li Xiasong	1	-0/+2
42 hours	netfilter: nf_conntrack_sip: get helper before allocating expectation	Li Xiasong	1	-4/+4
42 hours	netfilter: skip recording stale or retransmitted INIT	Xin Long	1	-3/+7
42 hours	netfilter: nf_conntrack_sip: don't use simple_strtoul	Florian Westphal	2	-34/+119
42 hours	netfilter: xt_policy: fix strict mode inbound policy matching	Jiexun Wang	1	-1/+1
42 hours	netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check	Fernando Fernandez Mancera	1	-15/+7
42 hours	netfilter: nfnetlink_osf: fix out-of-bounds read on option matching	Fernando Fernandez Mancera	1	-11/+8
42 hours	ipvs: fix MTU check for GSO packets in tunnel mode	Yingnan Zhang	1	-4/+15
42 hours	netfilter: xtables: restrict several matches to inet family	Pablo Neira Ayuso	4	-34/+68
42 hours	netfilter: conntrack: remove sprintf usage	Florian Westphal	2	-16/+19
42 hours	netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO	Xiang Mei	1	-0/+4
42 hours	netfilter: nft_osf: restrict it to ipv4	Pablo Neira Ayuso	1	-1/+5
42 hours	netfilter: nft_fwd_netdev: check ttl/hl before forwarding	Florian Westphal	1	-0/+10
42 hours	netfilter: xt_socket: enable defrag after all other checks	Florian Westphal	1	-17/+6
42 hours	netfilter: reject zero shift in nft_bitwise	Kai Ma	1	-1/+2
42 hours	nf_tables: nft_dynset: fix possible stateful expression memleak in error path	Pablo Neira Ayuso	2	-3/+11
42 hours	netfilter: conntrack: add missing netlink policy validations	Florian Westphal	2	-2/+3
42 hours	netfilter: xt_multiport: validate range encoding in checkentry	Ren Wei	1	-4/+30
42 hours	netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator	Xiang Mei	1	-4/+4
42 hours	netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry	Florian Westphal	1	-10/+10
2026-04-18	netfilter: nft_ct: fix use-after-free in timeout object destroy	Tuan Do	1	-1/+1
2026-04-18	netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR	Florian Westphal	1	-6/+14
2026-04-11	netfilter: ipset: drop logically empty buckets in mtype_del	Yifan Wu	1	-1/+1
2026-04-11	netfilter: nf_tables: reject immediate NF_QUEUE verdict	Pablo Neira Ayuso	1	-2/+5
2026-04-11	netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for N...	Pablo Neira Ayuso	1	-0/+23
2026-04-11	netfilter: ctnetlink: ignore explicit helper on new expectations	Pablo Neira Ayuso	1	-45/+9
2026-04-11	netfilter: nf_conntrack_expect: store netns and zone in expectation	Pablo Neira Ayuso	3	-3/+17
2026-04-11	netfilter: nf_conntrack_expect: use expect->helper	Pablo Neira Ayuso	4	-21/+13
2026-04-11	netfilter: nf_conntrack_expect: honor expectation helper field	Pablo Neira Ayuso	6	-11/+28
2026-04-11	netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent	Qi Tang	1	-0/+6
2026-04-11	netfilter: nf_conntrack_helper: pass helper to expect cleanup	Qi Tang	1	-1/+1
2026-04-11	netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr	Florian Westphal	2	-4/+4
2026-04-11	netfilter: x_tables: ensure names are nul-terminated	Florian Westphal	2	-0/+11
2026-04-11	netfilter: nfnetlink_log: account for netlink header size	Florian Westphal	1	-1/+1
2026-04-11	netfilter: flowtable: strictly check for maximum number of actions	Pablo Neira Ayuso	1	-66/+130
2026-04-11	netfilter: ctnetlink: use netlink policy range checks	David Carlier	2	-18/+8
2026-04-11	netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp	Weiming Shi	1	-4/+10
2026-04-11	netfilter: nf_conntrack_expect: skip expectations in other netns via proc	Pablo Neira Ayuso	1	-0/+4
2026-04-11	netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD	Weiming Shi	1	-6/+2
2026-03-25	netfilter: nft_set_pipapo: prevent overflow in lookup table allocation	Pablo Neira Ayuso	1	-14/+44
2026-03-25	netfilter: nf_tables: missing objects with no memcg accounting	Pablo Neira Ayuso	7	-14/+15
2026-03-25	netfilter: nft_set_pipapo: split gc into unlink and reclaim phase	Florian Westphal	3	-13/+45
2026-03-25	netfilter: nf_tables: de-constify set commit ops function argument	Florian Westphal	1	-4/+3
2026-03-25	nfnetlink_osf: validate individual option lengths in fingerprints	Weiming Shi	1	-0/+13
2026-03-25	netfilter: nf_tables: release flowtable after rcu grace period on error	Pablo Neira Ayuso	1	-0/+1
2026-03-25	netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()	Jenny Guanni Qu	1	-0/+2
2026-03-25	netfilter: xt_time: use unsigned int for monthday bit shift	Jenny Guanni Qu	1	-2/+2
2026-03-25	netfilter: xt_CT: drop pending enqueued packets on template removal	Pablo Neira Ayuso	1	-0/+4