kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
31 hours	audit: add audit_log_nf_skb helper function	Ricardo Robaina	2	-114/+2
31 hours	ipvs: fix more places with wrong ipv6 transport offsets	Julian Anastasov	2	-8/+5
31 hours	ipvs: reset full ip_vs_seq structs in ip_vs_conn_new	Yizhou Zhao	1	-2/+2
31 hours	ipvs: use parsed transport offset in SCTP state lookup	Yizhou Zhao	1	-10/+5
31 hours	netfilter: xt_nat: reject unsupported target families	Wyatt Feng	1	-0/+9
31 hours	netfilter: ecache: fix inverted time_after() check	Yizhou Zhao	1	-1/+1
31 hours	netfilter: nf_conncount: fix zone comparison in tuple dedup	Yizhou Zhao	1	-3/+3
31 hours	netfilter: nf_nat_sip: reload possible stale data pointer	Florian Westphal	1	-0/+11
31 hours	netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst	Haoze Xie	2	-0/+17
31 hours	netfilter: xt_cluster: reject template conntracks in hash match	Wyatt Feng	1	-1/+1
31 hours	netfilter: nfnl_cthelper: apply per-class values when updating policies	David Carlier	1	-2/+2
31 hours	netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read	Muhammad Bilal	1	-3/+3
31 hours	ipvs: ensure inner headers in ICMP errors are in headroom	Julian Anastasov	1	-6/+15
31 hours	ipvs: fix PMTU for GUE/GRE tunnel ICMP errors	Yizhou Zhao	1	-3/+3
31 hours	ipvs: use parsed transport offset in TCP state lookup	Yizhou Zhao	1	-7/+1
31 hours	ipvs: pass parsed transport offset to state handlers	Yizhou Zhao	4	-8/+11
31 hours	netfilter: xt_connmark: reject invalid shift parameters	Wyatt Feng	1	-2/+12
31 hours	netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()	Feng Wu	1	-1/+1
31 hours	netfilter: xt_u32: reject invalid shift counts	Wyatt Feng	1	-1/+11
31 hours	netfilter: nft_synproxy: stop bypassing the priv->info snapshot	Runyu Xiao	1	-5/+4
31 hours	netfilter: nf_conncount: prevent connlimit drops for early confirmed ct	Fernando Fernandez Mancera	1	-6/+5
31 hours	netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()	Mathias Krause	1	-0/+10
31 hours	netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()	Jozsef Kadlecsik	1	-2/+2
31 hours	netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types	Jozsef Kadlecsik	1	-5/+5
31 hours	netfilter: ipset: annotate "pos" for concurrent readers/writers	Jozsef Kadlecsik	1	-24/+38
31 hours	netfilter: ipset: Fix data race between add and dump in all hash types	Jozsef Kadlecsik	1	-2/+5
31 hours	netfilter: nf_conncount: callers must hold rcu read lock	Florian Westphal	1	-3/+3
31 hours	netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp	Pablo Neira Ayuso	1	-2/+16
31 hours	netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock	Fernando Fernandez Mancera	1	-0/+2
31 hours	netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures	Fernando Fernandez Mancera	1	-5/+1
31 hours	netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump	Pratham Gupta	1	-1/+1
31 hours	netfilter: ipset: fix race between dump and ip_set_list resize	Xiang Mei	1	-1/+7
2026-07-04	netfilter: nf_tables: always walk all pending catchall elements	Florian Westphal	1	-2/+0
2026-07-04	netfilter: nf_tables: unconditionally bump set->nelems before insertion	Pablo Neira Ayuso	1	-13/+15
2026-07-04	netfilter: nf_tables: fix set size with rbtree backend	Pablo Neira Ayuso	2	-2/+90
2026-07-04	netfilter: nf_tables: always increment set element count	Florian Westphal	1	-4/+7
2026-06-19	netfilter: require Ethernet MAC header before using eth_hdr()	Zhengchuan Liang	5	-12/+19
2026-06-19	ipvs: skip ipv6 extension headers for csum checks	Julian Anastasov	3	-39/+20
2026-06-19	netfilter: nft_fib: fix stale stack leak via the OIFNAME register	Davide Ornaghi	1	-0/+6
2026-06-19	netfilter: nft_tunnel: fix use-after-free on object destroy	Tristan Madani	1	-1/+1
2026-06-19	netfilter: ctnetlink: ensure safe access to master conntrack	Pablo Neira Ayuso	3	-10/+30
2026-06-19	netfilter: nft_exthdr: fix register tracking for F_PRESENT flag	Florian Westphal	1	-0/+3
2026-06-19	netfilter: nf_log: validate MAC header was set before dumping it	Xiang Mei	1	-2/+2
2026-06-19	netfilter: nf_conntrack: destroy stale expectfn expectations on unregister	Weiming Shi	3	-0/+22
2026-06-19	netfilter: conntrack_irc: fix possible out-of-bounds read	Florian Westphal	1	-2/+2
2026-06-19	netfilter: synproxy: add mutex to guard hook reference counting	Fernando Fernandez Mancera	1	-6/+18
2026-06-19	ipvs: clear the svc scheduler ptr early on edit	Julian Anastasov	2	-12/+15
2026-06-19	netfilter: xt_NFQUEUE: prefer raw_smp_processor_id	Fernando Fernandez Mancera	1	-1/+1
2026-06-19	netfilter: nf_tables: restore set elements when delete set fails	Pablo Neira Ayuso	5	-20/+42
2026-06-19	netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without dire...	Hamza Mahfooz	1	-1/+2