kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
36 hours	ipvs: reload ip header after head reallocation	Florian Westphal	1	-4/+2
36 hours	ipvs: fix more places with wrong ipv6 transport offsets	Julian Anastasov	2	-8/+5
36 hours	ipvs: reset full ip_vs_seq structs in ip_vs_conn_new	Yizhou Zhao	1	-2/+2
36 hours	ipvs: use parsed transport offset in SCTP state lookup	Yizhou Zhao	1	-10/+5
36 hours	netfilter: xt_nat: reject unsupported target families	Wyatt Feng	1	-0/+9
36 hours	netfilter: ecache: fix inverted time_after() check	Yizhou Zhao	1	-1/+1
36 hours	netfilter: nf_conncount: fix zone comparison in tuple dedup	Yizhou Zhao	1	-3/+3
36 hours	netfilter: nf_nat_sip: reload possible stale data pointer	Florian Westphal	1	-0/+11
36 hours	netfilter: nft_set_pipapo: don't leak bad clone into future transaction	Florian Westphal	2	-5/+37
36 hours	netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst	Haoze Xie	2	-0/+17
36 hours	netfilter: xt_cluster: reject template conntracks in hash match	Wyatt Feng	1	-1/+1
36 hours	netfilter: nfnl_cthelper: apply per-class values when updating policies	David Carlier	1	-2/+2
36 hours	netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read	Muhammad Bilal	1	-3/+3
36 hours	ipvs: ensure inner headers in ICMP errors are in headroom	Julian Anastasov	1	-6/+15
36 hours	ipvs: fix PMTU for GUE/GRE tunnel ICMP errors	Yizhou Zhao	1	-3/+3
36 hours	ipvs: use parsed transport offset in TCP state lookup	Yizhou Zhao	1	-7/+1
36 hours	ipvs: pass parsed transport offset to state handlers	Yizhou Zhao	4	-8/+11
36 hours	netfilter: nft_lookup: fix catchall element handling with inverted lookups	Tamaki Yanagawa	1	-5/+5
36 hours	netfilter: xt_connmark: reject invalid shift parameters	Wyatt Feng	1	-2/+12
36 hours	netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()	Feng Wu	1	-1/+1
36 hours	netfilter: xt_u32: reject invalid shift counts	Wyatt Feng	1	-1/+11
36 hours	netfilter: nft_compat: ebtables emulation must reject non-bridge targets	Florian Westphal	1	-3/+21
36 hours	netfilter: nft_synproxy: stop bypassing the priv->info snapshot	Runyu Xiao	1	-5/+4
36 hours	netfilter: nf_conncount: prevent connlimit drops for early confirmed ct	Fernando Fernandez Mancera	1	-6/+5
36 hours	netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()	Mathias Krause	1	-0/+10
36 hours	netfilter: ipset: make sure gc is properly stopped	Jozsef Kadlecsik	1	-1/+1
36 hours	netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()	Jozsef Kadlecsik	1	-2/+2
36 hours	netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types	Jozsef Kadlecsik	1	-5/+5
36 hours	netfilter: ipset: annotate "pos" for concurrent readers/writers	Jozsef Kadlecsik	1	-24/+38
36 hours	netfilter: ipset: Fix data race between add and dump in all hash types	Jozsef Kadlecsik	1	-2/+5
36 hours	netfilter: nf_conncount: callers must hold rcu read lock	Florian Westphal	1	-3/+3
36 hours	netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp	Pablo Neira Ayuso	1	-2/+16
36 hours	netfilter: conntrack: revert ct extension genid infrastructure	Pablo Neira Ayuso	2	-91/+2
36 hours	netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock	Fernando Fernandez Mancera	1	-0/+2
36 hours	netfilter: synproxy: fix unaligned memory access in timestamp adjustment	Fernando Fernandez Mancera	1	-10/+9
36 hours	netfilter: synproxy: adjust duplicate timestamp options	Fernando Fernandez Mancera	1	-1/+0
36 hours	netfilter: synproxy: drop packets if timestamp adjustment fails	Fernando Fernandez Mancera	1	-9/+13
36 hours	netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flags	Pablo Neira Ayuso	2	-8/+16
36 hours	netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures	Fernando Fernandez Mancera	1	-5/+1
7 days	netfilter: handle unreadable frags	Florian Westphal	3	-18/+40
7 days	netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump	Pratham Gupta	1	-1/+1
7 days	netfilter: ipset: fix race between dump and ip_set_list resize	Xiang Mei	1	-1/+7
2026-06-19	netfilter: require Ethernet MAC header before using eth_hdr()	Zhengchuan Liang	5	-12/+19
2026-06-19	ipvs: skip ipv6 extension headers for csum checks	Julian Anastasov	3	-39/+20
2026-06-19	netfilter: nft_fib: fix stale stack leak via the OIFNAME register	Davide Ornaghi	1	-0/+6
2026-06-19	netfilter: nft_tunnel: fix use-after-free on object destroy	Tristan Madani	1	-1/+1
2026-06-19	netfilter: ctnetlink: ensure safe access to master conntrack	Pablo Neira Ayuso	3	-10/+30
2026-06-19	netfilter: nft_exthdr: fix register tracking for F_PRESENT flag	Florian Westphal	1	-0/+3
2026-06-19	netfilter: nf_log: validate MAC header was set before dumping it	Xiang Mei	1	-2/+2
2026-06-19	netfilter: nf_conntrack: destroy stale expectfn expectations on unregister	Weiming Shi	3	-0/+22