kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
5 days	netfilter: nft_ct: fix missing expect put in obj eval	Li Xiasong	1	-0/+2
5 days	netfilter: nf_conntrack_sip: get helper before allocating expectation	Li Xiasong	1	-4/+4
5 days	netfilter: skip recording stale or retransmitted INIT	Xin Long	1	-3/+7
5 days	netfilter: nf_conntrack_sip: don't use simple_strtoul	Florian Westphal	2	-34/+119
5 days	netfilter: xt_policy: fix strict mode inbound policy matching	Jiexun Wang	1	-1/+1
5 days	netfilter: nf_tables: use list_del_rcu for netlink hooks	Florian Westphal	1	-26/+18
5 days	netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check	Fernando Fernandez Mancera	1	-15/+7
5 days	netfilter: nfnetlink_osf: fix out-of-bounds read on option matching	Fernando Fernandez Mancera	1	-11/+8
5 days	ipvs: fix MTU check for GSO packets in tunnel mode	Yingnan Zhang	1	-4/+15
5 days	netfilter: nat: use kfree_rcu to release ops	Pablo Neira Ayuso	1	-4/+6
5 days	netfilter: xtables: restrict several matches to inet family	Pablo Neira Ayuso	4	-34/+68
5 days	netfilter: conntrack: remove sprintf usage	Florian Westphal	2	-16/+19
5 days	netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO	Xiang Mei	1	-0/+4
5 days	netfilter: nft_osf: restrict it to ipv4	Pablo Neira Ayuso	1	-1/+5
5 days	netfilter: nft_fwd_netdev: check ttl/hl before forwarding	Florian Westphal	1	-0/+10
5 days	netfilter: xt_socket: enable defrag after all other checks	Florian Westphal	1	-17/+6
2026-05-07	netfilter: reject zero shift in nft_bitwise	Kai Ma	1	-1/+2
2026-04-22	netfilter: conntrack: add missing netlink policy validations	Florian Westphal	2	-2/+3
2026-04-22	netfilter: nfnetlink_queue: make hash table per queue	Florian Westphal	1	-90/+49
2026-04-22	netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT a...	Scott Mitchell	1	-41/+34
2026-04-22	netfilter: xt_multiport: validate range encoding in checkentry	Ren Wei	1	-4/+30
2026-04-22	netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator	Xiang Mei	1	-4/+4
2026-04-22	ipvs: fix NULL deref in ip_vs_add_service error path	Weiming Shi	1	-1/+0
2026-04-22	netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry	Florian Westphal	1	-10/+10
2026-04-22	netfilter: ctnetlink: ensure safe access to master conntrack	Pablo Neira Ayuso	3	-10/+30
2026-04-18	netfilter: nft_ct: fix use-after-free in timeout object destroy	Tuan Do	1	-1/+1
2026-04-11	netfilter: ipset: drop logically empty buckets in mtype_del	Yifan Wu	1	-1/+1
2026-04-11	netfilter: nf_tables: reject immediate NF_QUEUE verdict	Pablo Neira Ayuso	1	-2/+5
2026-04-11	netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for N...	Pablo Neira Ayuso	1	-0/+23
2026-04-11	netfilter: ctnetlink: ignore explicit helper on new expectations	Pablo Neira Ayuso	1	-45/+9
2026-04-11	netfilter: nf_conntrack_expect: store netns and zone in expectation	Pablo Neira Ayuso	3	-3/+17
2026-04-11	netfilter: nf_conntrack_expect: use expect->helper	Pablo Neira Ayuso	4	-21/+13
2026-04-11	netfilter: nf_conntrack_expect: honor expectation helper field	Pablo Neira Ayuso	6	-11/+28
2026-04-11	netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent	Qi Tang	1	-0/+6
2026-04-11	netfilter: nf_conntrack_helper: pass helper to expect cleanup	Qi Tang	1	-1/+1
2026-04-11	netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr	Florian Westphal	2	-4/+4
2026-04-11	netfilter: x_tables: ensure names are nul-terminated	Florian Westphal	2	-0/+11
2026-04-11	netfilter: nfnetlink_log: account for netlink header size	Florian Westphal	1	-1/+1
2026-04-11	netfilter: flowtable: strictly check for maximum number of actions	Pablo Neira Ayuso	1	-66/+130
2026-04-02	netfilter: ctnetlink: use netlink policy range checks	David Carlier	2	-18/+8
2026-04-02	netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp	Weiming Shi	1	-4/+10
2026-04-02	netfilter: nf_conntrack_expect: skip expectations in other netns via proc	Pablo Neira Ayuso	1	-0/+4
2026-04-02	netfilter: nft_set_rbtree: revisit array resize logic	Pablo Neira Ayuso	1	-17/+75
2026-04-02	netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD	Weiming Shi	1	-6/+2
2026-03-25	nfnetlink_osf: validate individual option lengths in fingerprints	Weiming Shi	1	-0/+13
2026-03-25	netfilter: nf_tables: release flowtable after rcu grace period on error	Pablo Neira Ayuso	1	-0/+1
2026-03-25	netfilter: bpf: defer hook memory release until rcu readers are done	Florian Westphal	1	-1/+1
2026-03-25	netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()	Jenny Guanni Qu	1	-0/+2
2026-03-25	netfilter: xt_time: use unsigned int for monthday bit shift	Jenny Guanni Qu	1	-2/+2
2026-03-25	netfilter: xt_CT: drop pending enqueued packets on template removal	Pablo Neira Ayuso	1	-0/+4