kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
33 hours	netfilter: require Ethernet MAC header before using eth_hdr()	Zhengchuan Liang	5	-12/+19
33 hours	ipvs: skip ipv6 extension headers for csum checks	Julian Anastasov	3	-39/+20
33 hours	netfilter: nft_fib: fix stale stack leak via the OIFNAME register	Davide Ornaghi	1	-0/+6
33 hours	netfilter: nft_tunnel: fix use-after-free on object destroy	Tristan Madani	1	-1/+1
33 hours	netfilter: ctnetlink: ensure safe access to master conntrack	Pablo Neira Ayuso	3	-10/+30
33 hours	netfilter: nft_exthdr: fix register tracking for F_PRESENT flag	Florian Westphal	1	-0/+3
33 hours	netfilter: nf_log: validate MAC header was set before dumping it	Xiang Mei	1	-2/+2
33 hours	netfilter: nf_conntrack: destroy stale expectfn expectations on unregister	Weiming Shi	3	-0/+22
33 hours	netfilter: conntrack_irc: fix possible out-of-bounds read	Florian Westphal	1	-2/+2
33 hours	netfilter: synproxy: add mutex to guard hook reference counting	Fernando Fernandez Mancera	1	-6/+18
33 hours	ipvs: clear the svc scheduler ptr early on edit	Julian Anastasov	2	-12/+15
33 hours	netfilter: xt_NFQUEUE: prefer raw_smp_processor_id	Fernando Fernandez Mancera	1	-1/+1
33 hours	netfilter: nf_tables: restore set elements when delete set fails	Pablo Neira Ayuso	5	-20/+42
33 hours	netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without dire...	Hamza Mahfooz	1	-1/+2
33 hours	netfilter: xt_cpu: prefer raw_smp_processor_id	Florian Westphal	1	-1/+1
33 hours	netfilter: synproxy: refresh tcphdr after skb_ensure_writable	Chris Mason	1	-0/+2
2026-06-01	netfilter: ipset: stop hash:* range iteration at end	Nan Li	4	-4/+17
2026-06-01	netfilter: nf_queue: hold bridge skb->dev while queued	Haoze Xie	2	-1/+5
2026-06-01	netfilter: nft_ct: fix missing expect put in obj eval	Li Xiasong	1	-0/+2
2026-06-01	netfilter: nf_conntrack_sip: get helper before allocating expectation	Li Xiasong	1	-4/+4
2026-06-01	netfilter: skip recording stale or retransmitted INIT	Xin Long	1	-3/+7
2026-06-01	netfilter: nf_conntrack_sip: don't use simple_strtoul	Florian Westphal	2	-34/+119
2026-06-01	netfilter: xt_policy: fix strict mode inbound policy matching	Jiexun Wang	1	-1/+1
2026-06-01	netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check	Fernando Fernandez Mancera	1	-15/+7
2026-06-01	netfilter: nfnetlink_osf: fix out-of-bounds read on option matching	Fernando Fernandez Mancera	1	-11/+8
2026-06-01	ipvs: fix MTU check for GSO packets in tunnel mode	Yingnan Zhang	1	-4/+15
2026-06-01	netfilter: xtables: restrict several matches to inet family	Pablo Neira Ayuso	4	-34/+68
2026-06-01	netfilter: conntrack: remove sprintf usage	Florian Westphal	2	-16/+19
2026-06-01	netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO	Xiang Mei	1	-0/+4
2026-06-01	netfilter: nft_osf: restrict it to ipv4	Pablo Neira Ayuso	1	-1/+5
2026-06-01	netfilter: nft_fwd_netdev: check ttl/hl before forwarding	Florian Westphal	1	-0/+10
2026-06-01	netfilter: xt_socket: enable defrag after all other checks	Florian Westphal	1	-17/+6
2026-06-01	netfilter: reject zero shift in nft_bitwise	Kai Ma	1	-1/+2
2026-06-01	nf_tables: nft_dynset: fix possible stateful expression memleak in error path	Pablo Neira Ayuso	2	-3/+11
2026-06-01	netfilter: conntrack: add missing netlink policy validations	Florian Westphal	2	-2/+3
2026-06-01	netfilter: xt_multiport: validate range encoding in checkentry	Ren Wei	1	-4/+30
2026-06-01	netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator	Xiang Mei	1	-4/+4
2026-06-01	netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry	Florian Westphal	1	-10/+10
2026-04-18	netfilter: nft_ct: fix use-after-free in timeout object destroy	Tuan Do	1	-1/+1
2026-04-18	netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR	Florian Westphal	1	-6/+14
2026-04-11	netfilter: ipset: drop logically empty buckets in mtype_del	Yifan Wu	1	-1/+1
2026-04-11	netfilter: nf_tables: reject immediate NF_QUEUE verdict	Pablo Neira Ayuso	1	-2/+5
2026-04-11	netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for N...	Pablo Neira Ayuso	1	-0/+23
2026-04-11	netfilter: ctnetlink: ignore explicit helper on new expectations	Pablo Neira Ayuso	1	-45/+9
2026-04-11	netfilter: nf_conntrack_expect: store netns and zone in expectation	Pablo Neira Ayuso	3	-3/+17
2026-04-11	netfilter: nf_conntrack_expect: use expect->helper	Pablo Neira Ayuso	4	-21/+13
2026-04-11	netfilter: nf_conntrack_expect: honor expectation helper field	Pablo Neira Ayuso	6	-11/+28
2026-04-11	netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent	Qi Tang	1	-0/+6
2026-04-11	netfilter: nf_conntrack_helper: pass helper to expect cleanup	Qi Tang	1	-1/+1
2026-04-11	netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr	Florian Westphal	2	-4/+4