summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
12 daysnetfilter: nft_fib: reject fib expression on the netdev egress hookTheodor Arsenij Larionov-Trichkine2-1/+37
12 daysnetfilter: nf_tables: remove register tracking infrastructureFlorian Westphal41-626/+0
12 daysnetfilter: bitwise: rename some boolean operation functionsJeremy Sowden1-17/+17
12 daysnetfilter: nf_conntrack_sip: validate skb_dst() before accessing itPablo Neira Ayuso1-2/+5
12 daysnetfilter: nf_conntrack_sip: remove net variable shadowingFlorian Westphal1-2/+1
12 daysnetfilter: nf_tables: revert commit_mutex usage in reset pathBrian Witte1-206/+42
12 daysnetfilter: nft_quota: use atomic64_xchg for resetBrian Witte1-6/+7
12 daysnetfilter: nft_counter: serialize reset with spinlockBrian Witte1-4/+16
2026-07-24ipvs: reload ip header after head reallocationFlorian Westphal1-4/+2
2026-07-24ipvs: fix more places with wrong ipv6 transport offsetsJulian Anastasov2-8/+5
2026-07-24ipvs: reset full ip_vs_seq structs in ip_vs_conn_newYizhou Zhao1-2/+2
2026-07-24ipvs: use parsed transport offset in SCTP state lookupYizhou Zhao1-10/+5
2026-07-24netfilter: xt_nat: reject unsupported target familiesWyatt Feng1-0/+9
2026-07-24netfilter: ecache: fix inverted time_after() checkYizhou Zhao1-1/+1
2026-07-24netfilter: nf_conncount: fix zone comparison in tuple dedupYizhou Zhao1-3/+3
2026-07-24netfilter: nf_nat_sip: reload possible stale data pointerFlorian Westphal1-0/+11
2026-07-24netfilter: nft_set_pipapo: don't leak bad clone into future transactionFlorian Westphal2-5/+37
2026-07-24netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dstHaoze Xie2-0/+17
2026-07-24netfilter: xt_cluster: reject template conntracks in hash matchWyatt Feng1-1/+1
2026-07-24netfilter: nfnl_cthelper: apply per-class values when updating policiesDavid Carlier1-2/+2
2026-07-24netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB readMuhammad Bilal1-3/+3
2026-07-24ipvs: ensure inner headers in ICMP errors are in headroomJulian Anastasov1-6/+15
2026-07-24ipvs: fix PMTU for GUE/GRE tunnel ICMP errorsYizhou Zhao1-3/+3
2026-07-24ipvs: use parsed transport offset in TCP state lookupYizhou Zhao1-7/+1
2026-07-24ipvs: pass parsed transport offset to state handlersYizhou Zhao4-8/+11
2026-07-24netfilter: nft_lookup: fix catchall element handling with inverted lookupsTamaki Yanagawa1-5/+5
2026-07-24netfilter: xt_connmark: reject invalid shift parametersWyatt Feng1-2/+12
2026-07-24netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()Feng Wu1-1/+1
2026-07-24netfilter: xt_u32: reject invalid shift countsWyatt Feng1-1/+11
2026-07-24netfilter: nft_compat: ebtables emulation must reject non-bridge targetsFlorian Westphal1-3/+21
2026-07-24netfilter: nft_synproxy: stop bypassing the priv->info snapshotRunyu Xiao1-5/+4
2026-07-24netfilter: nf_conncount: prevent connlimit drops for early confirmed ctFernando Fernandez Mancera1-6/+5
2026-07-24netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()Mathias Krause1-0/+10
2026-07-24netfilter: ipset: make sure gc is properly stoppedJozsef Kadlecsik1-1/+1
2026-07-24netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()Jozsef Kadlecsik1-2/+2
2026-07-24netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash typesJozsef Kadlecsik1-5/+5
2026-07-24netfilter: ipset: annotate "pos" for concurrent readers/writersJozsef Kadlecsik1-24/+38
2026-07-24netfilter: ipset: Fix data race between add and dump in all hash typesJozsef Kadlecsik1-2/+5
2026-07-24netfilter: nf_conncount: callers must hold rcu read lockFlorian Westphal1-3/+3
2026-07-24netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptpPablo Neira Ayuso1-2/+16
2026-07-24netfilter: conntrack: revert ct extension genid infrastructurePablo Neira Ayuso2-91/+2
2026-07-24netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lockFernando Fernandez Mancera1-0/+2
2026-07-24netfilter: synproxy: fix unaligned memory access in timestamp adjustmentFernando Fernandez Mancera1-10/+9
2026-07-24netfilter: synproxy: adjust duplicate timestamp optionsFernando Fernandez Mancera1-1/+0
2026-07-24netfilter: synproxy: drop packets if timestamp adjustment failsFernando Fernandez Mancera1-9/+13
2026-07-24netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flagsPablo Neira Ayuso2-8/+16
2026-07-24netfilter: nfnetlink_osf: fix mss parsing on big-endian architecturesFernando Fernandez Mancera1-5/+1
2026-07-18netfilter: handle unreadable fragsFlorian Westphal3-18/+40
2026-07-18netfilter: ctnetlink: use nf_ct_exp_net() in expectation dumpPratham Gupta1-1/+1
2026-07-18netfilter: ipset: fix race between dump and ip_set_list resizeXiang Mei1-1/+7
generated by cgit v1.2.3 (git 2.39.0) at 2026-08-15 14:06:52 +0300