kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
10 days	netfilter: ipset: let destroy callbacks adjust ext mem size	Florian Westphal	2	-3/+2
10 days	netfilter: ipset: fix list type element drift bug	Florian Westphal	1	-2/+5
10 days	netfilter: flowtable: publish GC-visible tuple last	Jérémy Jean	1	-3/+4
10 days	netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path	Alexey Velichayshiy	1	-1/+1
10 days	netfilter: ipset: fix refcount race between list:set GC and swap	Xiang Mei (Microsoft)	1	-6/+13
10 days	ipvs: separate destination availability state	Yizhou Zhao	6	-14/+14
13 days	netfilter: nf_conntrack: defer invalid log until after unlock	Zihan Xi	3	-48/+102
13 days	ipvs: clear IPv4 options after rebasing tunnel ICMP errors	Kyle Zeng	1	-0/+1
13 days	ipvs: properly update the overload flag on dest edit	Julian Anastasov	2	-25/+69
13 days	ipvs: add totalconns for dest	Julian Anastasov	6	-33/+16
13 days	ipvs: stop estimator after disabled calc phase	Zhiling Zou	1	-3/+7
13 days	ipvs: return the csum validation for forward hook	Julian Anastasov	1	-1/+1
13 days	ipvs: avoid out-of-bounds write in ip_vs_nat_icmp	Julian Anastasov	2	-34/+35
13 days	netfilter: ipset: switch ext_size to atomic64_t	Jozsef Kadlecsik	4	-8/+8
2026-08-09	netfilter: ipset: do not update comments from kernel-side hash adds	David Lee	1	-1/+1
2026-08-09	ipvs: do not propagate one-packet flag to synced conns	Zhiling Zou	1	-0/+3
2026-08-09	netfilter: nft_payload: fix mask build for partial field offload	Xiang Mei (Microsoft)	1	-11/+1
2026-08-09	ipvs: do not mangle ICMP replies for non-first fragments	Julian Anastasov	2	-46/+43
2026-08-09	ipvs: fix places with wrong packet offsets	Julian Anastasov	6	-87/+88
2026-08-09	ipvs: fix the checksum validations	Julian Anastasov	4	-84/+45
2026-08-09	netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH	Pablo Neira Ayuso	1	-1/+15
2026-08-09	netfilter: nf_tables: make nft_object rhltable per table	Pablo Neira Ayuso	1	-18/+16
2026-08-09	netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()	Xiang Mei	2	-2/+2
2026-08-09	netfilter: nf_conntrack_expect: restore helper propagation via expectation	Pablo Neira Ayuso	7	-11/+35
2026-08-03	netfilter: nft_fib: reject fib expression on the netdev egress hook	Theodor Arsenij Larionov-Trichkine	2	-1/+37
2026-08-03	netfilter: nf_tables: remove register tracking infrastructure	Florian Westphal	41	-626/+0
2026-08-03	netfilter: bitwise: rename some boolean operation functions	Jeremy Sowden	1	-17/+17
2026-08-03	netfilter: nf_conntrack_sip: validate skb_dst() before accessing it	Pablo Neira Ayuso	1	-2/+5
2026-08-03	netfilter: nf_conntrack_sip: remove net variable shadowing	Florian Westphal	1	-2/+1
2026-08-03	netfilter: nf_tables: revert commit_mutex usage in reset path	Brian Witte	1	-206/+42
2026-08-03	netfilter: nft_quota: use atomic64_xchg for reset	Brian Witte	1	-6/+7
2026-08-03	netfilter: nft_counter: serialize reset with spinlock	Brian Witte	1	-4/+16
2026-07-24	ipvs: reload ip header after head reallocation	Florian Westphal	1	-4/+2
2026-07-24	ipvs: fix more places with wrong ipv6 transport offsets	Julian Anastasov	2	-8/+5
2026-07-24	ipvs: reset full ip_vs_seq structs in ip_vs_conn_new	Yizhou Zhao	1	-2/+2
2026-07-24	ipvs: use parsed transport offset in SCTP state lookup	Yizhou Zhao	1	-10/+5
2026-07-24	netfilter: xt_nat: reject unsupported target families	Wyatt Feng	1	-0/+9
2026-07-24	netfilter: ecache: fix inverted time_after() check	Yizhou Zhao	1	-1/+1
2026-07-24	netfilter: nf_conncount: fix zone comparison in tuple dedup	Yizhou Zhao	1	-3/+3
2026-07-24	netfilter: nf_nat_sip: reload possible stale data pointer	Florian Westphal	1	-0/+11
2026-07-24	netfilter: nft_set_pipapo: don't leak bad clone into future transaction	Florian Westphal	2	-5/+37
2026-07-24	netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst	Haoze Xie	2	-0/+17
2026-07-24	netfilter: xt_cluster: reject template conntracks in hash match	Wyatt Feng	1	-1/+1
2026-07-24	netfilter: nfnl_cthelper: apply per-class values when updating policies	David Carlier	1	-2/+2
2026-07-24	netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read	Muhammad Bilal	1	-3/+3
2026-07-24	ipvs: ensure inner headers in ICMP errors are in headroom	Julian Anastasov	1	-6/+15
2026-07-24	ipvs: fix PMTU for GUE/GRE tunnel ICMP errors	Yizhou Zhao	1	-3/+3
2026-07-24	ipvs: use parsed transport offset in TCP state lookup	Yizhou Zhao	1	-7/+1
2026-07-24	ipvs: pass parsed transport offset to state handlers	Yizhou Zhao	4	-8/+11
2026-07-24	netfilter: nft_lookup: fix catchall element handling with inverted lookups	Tamaki Yanagawa	1	-5/+5