kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
6 days	ipvs: reload ip header after head reallocation	Florian Westphal	1	-4/+2
6 days	ipvs: fix more places with wrong ipv6 transport offsets	Julian Anastasov	2	-8/+5
6 days	ipvs: reset full ip_vs_seq structs in ip_vs_conn_new	Yizhou Zhao	1	-2/+2
6 days	ipvs: use parsed transport offset in SCTP state lookup	Yizhou Zhao	1	-10/+5
6 days	netfilter: xt_nat: reject unsupported target families	Wyatt Feng	1	-0/+9
6 days	netfilter: ecache: fix inverted time_after() check	Yizhou Zhao	1	-1/+1
6 days	netfilter: nf_conncount: fix zone comparison in tuple dedup	Yizhou Zhao	1	-3/+3
6 days	netfilter: nf_nat_sip: reload possible stale data pointer	Florian Westphal	1	-0/+11
6 days	netfilter: nft_set_pipapo: don't leak bad clone into future transaction	Florian Westphal	2	-5/+37
6 days	netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst	Haoze Xie	2	-0/+17
6 days	netfilter: xt_cluster: reject template conntracks in hash match	Wyatt Feng	1	-1/+1
6 days	netfilter: nfnl_cthelper: apply per-class values when updating policies	David Carlier	1	-2/+2
6 days	netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read	Muhammad Bilal	1	-3/+3
6 days	ipvs: ensure inner headers in ICMP errors are in headroom	Julian Anastasov	1	-6/+15
6 days	ipvs: fix PMTU for GUE/GRE tunnel ICMP errors	Yizhou Zhao	1	-3/+3
6 days	ipvs: use parsed transport offset in TCP state lookup	Yizhou Zhao	1	-7/+1
6 days	ipvs: pass parsed transport offset to state handlers	Yizhou Zhao	4	-8/+11
6 days	netfilter: nft_lookup: fix catchall element handling with inverted lookups	Tamaki Yanagawa	1	-5/+5
6 days	netfilter: xt_connmark: reject invalid shift parameters	Wyatt Feng	1	-2/+12
6 days	netfilter: nft_set_rbtree: get command skips end element with open interval	Pablo Neira Ayuso	2	-2/+9
6 days	netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()	Feng Wu	1	-1/+1
6 days	netfilter: xt_u32: reject invalid shift counts	Wyatt Feng	1	-1/+11
6 days	netfilter: nft_compat: ebtables emulation must reject non-bridge targets	Florian Westphal	1	-3/+21
6 days	netfilter: nft_synproxy: stop bypassing the priv->info snapshot	Runyu Xiao	1	-5/+4
6 days	netfilter: nf_conncount: prevent connlimit drops for early confirmed ct	Fernando Fernandez Mancera	1	-6/+5
6 days	netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()	Mathias Krause	1	-0/+10
6 days	netfilter: nft_flow_offload: zero device address for non-ether case	Florian Westphal	1	-1/+3
6 days	netfilter: flowtable: move path discovery infrastructure to its own file	Pablo Neira Ayuso	3	-259/+275
6 days	netfilter: nft_meta_bridge: add validate callback for get operations	Florian Westphal	1	-2/+3
6 days	netfilter: nft_payload: reject offsets exceeding 65535 bytes	Florian Westphal	1	-3/+13
6 days	netfilter: ipset: make sure gc is properly stopped	Jozsef Kadlecsik	1	-1/+1
6 days	netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()	Jozsef Kadlecsik	1	-2/+2
6 days	netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types	Jozsef Kadlecsik	1	-5/+5
6 days	netfilter: ipset: annotate "pos" for concurrent readers/writers	Jozsef Kadlecsik	1	-24/+38
6 days	netfilter: ipset: Fix data race between add and dump in all hash types	Jozsef Kadlecsik	1	-2/+5
6 days	netfilter: nf_conncount: callers must hold rcu read lock	Florian Westphal	1	-3/+3
6 days	netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp	Pablo Neira Ayuso	1	-2/+16
6 days	netfilter: conntrack: revert ct extension genid infrastructure	Pablo Neira Ayuso	2	-91/+2
6 days	netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock	Fernando Fernandez Mancera	1	-0/+2
6 days	netfilter: synproxy: fix unaligned memory access in timestamp adjustment	Fernando Fernandez Mancera	1	-10/+9
6 days	netfilter: synproxy: adjust duplicate timestamp options	Fernando Fernandez Mancera	1	-1/+0
6 days	netfilter: synproxy: drop packets if timestamp adjustment fails	Fernando Fernandez Mancera	1	-9/+13
6 days	netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flags	Pablo Neira Ayuso	2	-8/+16
6 days	netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures	Fernando Fernandez Mancera	1	-5/+1
11 days	netfilter: flowtable: fix offloaded ct timeout never being extended	Adrian Bente	1	-4/+9
11 days	netfilter: handle unreadable frags	Florian Westphal	3	-18/+40
11 days	netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump	Pratham Gupta	1	-1/+1
11 days	netfilter: ipset: fix race between dump and ip_set_list resize	Xiang Mei	1	-1/+7
2026-06-19	netfilter: require Ethernet MAC header before using eth_hdr()	Zhengchuan Liang	5	-12/+19
2026-06-19	ipvs: skip ipv6 extension headers for csum checks	Julian Anastasov	3	-39/+20