summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2025-04-20nft_set_pipapo: fix incorrect avx2 match of 5th field octetFlorian Westphal1-1/+2
2025-04-10net: fix geneve_opt length integer overflowLin Ma1-1/+1
2025-04-10netfilter: nft_tunnel: fix geneve_opt type confusion additionLin Ma1-2/+2
2025-04-10netfilter: nf_tables: don't unregister hook when table is dormantFlorian Westphal1-2/+2
2025-04-10netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets onlyPablo Neira Ayuso1-1/+2
2025-04-10netfilter: nf_tables: Only use nf_skip_indirect_calls() when MITIGATION_RETPO...WangYuli1-7/+4
2025-04-10netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation errorChenyuan Yang1-1/+1
2025-03-13netfilter: nft_exthdr: fix offset with ipv4_find_option()Alexey Kashavkin1-6/+4
2025-03-12ipvs: prevent integer overflow in do_ip_vs_get_ctl()Dan Carpenter1-4/+4
2025-03-12netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert...Kohei Enju1-0/+2
2025-03-06netfilter: nf_tables: make destruction work queue pernetFlorian Westphal2-14/+18
2025-03-06netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap ...Nicklas Bo Jensen1-2/+2
2025-03-03netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.Sebastian Andrzej Siewior1-2/+4
2025-02-12Revert "netfilter: flowtable: teardown flow if cached mtu is stale"Pablo Neira Ayuso1-6/+2
2025-01-30Merge tag 'net-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-4/+4
2025-01-30Merge tag 'nf-25-01-30' of git://git.kernel.org/pub/scm/linux/kernel/git/netf...Jakub Kicinski1-4/+4
2025-01-30netfilter: nf_tables: reject mismatching sum of field_len with set key lengthPablo Neira Ayuso1-4/+4
2025-01-27Merge tag 'mm-nonmm-stable-2025-01-24-23-16' of git://git.kernel.org/pub/scm/...Linus Torvalds1-13/+8
2025-01-22Merge tag 'net-next-6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/ne...Linus Torvalds17-167/+405
2025-01-22Merge tag 'lsm-pr-20250121' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds3-28/+29
2025-01-19netfilter: flowtable: add CLOSING statePablo Neira Ayuso2-19/+57
2025-01-19netfilter: flowtable: teardown flow if cached mtu is stalePablo Neira Ayuso1-2/+6
2025-01-19netfilter: conntrack: rework offload nf_conn timeout extension logicFlorian Westphal2-8/+103
2025-01-19netfilter: conntrack: remove skb argument from nf_ct_refreshFlorian Westphal6-11/+10
2025-01-19netfilter: nft_flow_offload: update tcp state flags under lockFlorian Westphal1-5/+11
2025-01-19netfilter: nft_flow_offload: clear tcp MAXACK flag before moving to slowpathFlorian Westphal1-2/+12
2025-01-19netfilter: nf_tables: Simplify chain netdev notifierPhil Sutter1-14/+7
2025-01-19netfilter: nf_tables: Tolerate chains with no remaining hooksPhil Sutter2-63/+7
2025-01-19netfilter: nf_tables: Compare netdev hooks based on stored namePhil Sutter1-1/+1
2025-01-19netfilter: nf_tables: Use stored ifname in netdev hook dumpsPhil Sutter1-4/+6
2025-01-19netfilter: nf_tables: Store user-defined hook ifnamePhil Sutter1-3/+7
2025-01-19netfilter: nf_tables: Flowtable hook's pf value never variesPhil Sutter1-7/+4
2025-01-19netfilter: nf_tables: fix set size with rbtree backendPablo Neira Ayuso2-2/+90
2025-01-14Merge tag 'nf-next-25-01-11' of git://git.kernel.org/pub/scm/linux/kernel/git...Paolo Abeni5-27/+84
2025-01-13netfilter: conntrack: cleanup timeout definitionsEaswar Hariharan1-13/+8
2025-01-10Merge tag 'ipsec-next-2025-01-09' of git://git.kernel.org/pub/scm/linux/kerne...David S. Miller1-1/+2
2025-01-09netfilter: conntrack: add conntrack event timestampFlorian Westphal2-0/+48
2025-01-09netfilter: conntrack: clamp maximum hashtable size to INT_MAXPablo Neira Ayuso1-1/+4
2025-01-09netfilter: nf_tables: imbalance in flowtable bindingPablo Neira Ayuso1-4/+11
2025-01-05netfilter: xt_hashlimit: htable_selective_cleanup() optimizationEric Dumazet1-1/+5
2025-01-05ipvs: speed up reads from ip_vs_conn proc fileFlorian Westphal1-22/+28
2025-01-05netfilter: nf_tables: remove the genmask parametertuqiang1-4/+3
2025-01-05net: corrections for security_secid_to_secctx returnsCasey Schaufler1-5/+7
2024-12-19netfilter: ipset: Fix for recursive locking warningPhil Sutter1-0/+3
2024-12-19ipvs: Fix clamp() of ip_vs_conn_tab on small memory systemsDavid Laight1-2/+2
2024-12-12netfilter: nf_tables: do not defer rule destruction via call_rcuFlorian Westphal1-17/+15
2024-12-12netfilter: IDLETIMER: Fix for possible ABBA deadlockPhil Sutter1-24/+28
2024-12-05xfrm: add generic iptfs defines and functionalityChristian Hopps1-1/+2
2024-12-04netfilter: nft_set_hash: skip duplicated elements pending gc runPablo Neira Ayuso1-0/+16
2024-12-04lsm: replace context+len with lsm_contextCasey Schaufler3-24/+19
generated by cgit v1.2.3 (git 2.39.0) at 2026-01-11 18:01:11 +0300