summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
10 daysnetfilter: ipset: let destroy callbacks adjust ext mem sizeFlorian Westphal2-3/+2
10 daysnetfilter: ipset: fix list type element drift bugFlorian Westphal1-2/+5
10 daysnetfilter: flowtable: publish GC-visible tuple lastJérémy Jean1-3/+4
10 daysnetfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort pathAlexey Velichayshiy1-1/+1
10 daysnetfilter: ipset: fix refcount race between list:set GC and swapXiang Mei (Microsoft)1-6/+13
10 daysipvs: separate destination availability stateYizhou Zhao6-14/+14
2026-08-19netfilter: flowtable: ensure sufficient headroom in xmit pathPablo Neira Ayuso1-2/+11
2026-08-19netfilter: always set route tuple out ifindexLorenzo Bianconi1-1/+3
2026-08-19netfilter: nf_conntrack: defer invalid log until after unlockZihan Xi3-48/+102
2026-08-19netfilter: nf_tables: avoid softlockup warnings in nft_chain_validateFlorian Westphal1-2/+2
2026-08-19ipvs: clear IPv4 options after rebasing tunnel ICMP errorsKyle Zeng1-0/+1
2026-08-19ipvs: properly update the overload flag on dest editJulian Anastasov2-25/+69
2026-08-19ipvs: add totalconns for destJulian Anastasov6-33/+16
2026-08-19ipvs: stop estimator after disabled calc phaseZhiling Zou1-3/+7
2026-08-19netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()Eric Dumazet1-0/+3
2026-08-19netfilter: flowtable: consolidate xmit pathPablo Neira Ayuso3-39/+56
2026-08-19ipvs: return the csum validation for forward hookJulian Anastasov1-1/+1
2026-08-19ipvs: avoid out-of-bounds write in ip_vs_nat_icmpJulian Anastasov2-34/+35
2026-08-19netfilter: ipset: switch ext_size to atomic64_tJozsef Kadlecsik4-8/+8
2026-08-09netfilter: ipset: do not update comments from kernel-side hash addsDavid Lee1-1/+1
2026-08-09ipvs: do not propagate one-packet flag to synced connsZhiling Zou1-0/+3
2026-08-09netfilter: nft_payload: fix mask build for partial field offloadXiang Mei (Microsoft)1-11/+1
2026-08-09ipvs: do not mangle ICMP replies for non-first fragmentsJulian Anastasov2-46/+43
2026-08-09ipvs: fix places with wrong packet offsetsJulian Anastasov6-87/+88
2026-08-09ipvs: fix the checksum validationsJulian Anastasov4-84/+45
2026-08-09netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCHPablo Neira Ayuso1-1/+15
2026-08-09netfilter: nf_tables: make nft_object rhltable per tablePablo Neira Ayuso1-18/+16
2026-08-09netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()Xiang Mei2-2/+2
2026-08-09netfilter: nf_conntrack_expect: restore helper propagation via expectationPablo Neira Ayuso7-11/+35
2026-08-03netfilter: nf_conntrack_sip: validate skb_dst() before accessing itPablo Neira Ayuso1-2/+5
2026-08-03netfilter: nf_conntrack_sip: remove net variable shadowingFlorian Westphal1-2/+1
2026-08-03netfilter: nft_fib: reject fib expression on the netdev egress hookTheodor Arsenij Larionov-Trichkine2-1/+37
2026-08-03netfilter: nf_tables: remove register tracking infrastructureFlorian Westphal41-627/+0
2026-08-03netfilter: nf_tables: revert commit_mutex usage in reset pathBrian Witte1-206/+42
2026-08-03netfilter: nft_quota: use atomic64_xchg for resetBrian Witte1-6/+7
2026-08-03netfilter: nft_counter: serialize reset with spinlockBrian Witte1-4/+16
2026-07-24ipvs: reload ip header after head reallocationFlorian Westphal1-4/+2
2026-07-24ipvs: fix more places with wrong ipv6 transport offsetsJulian Anastasov2-8/+5
2026-07-24ipvs: reset full ip_vs_seq structs in ip_vs_conn_newYizhou Zhao1-2/+2
2026-07-24ipvs: use parsed transport offset in SCTP state lookupYizhou Zhao1-10/+5
2026-07-24netfilter: xt_nat: reject unsupported target familiesWyatt Feng1-0/+9
2026-07-24netfilter: ecache: fix inverted time_after() checkYizhou Zhao1-1/+1
2026-07-24netfilter: nf_conncount: fix zone comparison in tuple dedupYizhou Zhao1-3/+3
2026-07-24netfilter: nf_nat_sip: reload possible stale data pointerFlorian Westphal1-0/+11
2026-07-24netfilter: nft_set_pipapo: don't leak bad clone into future transactionFlorian Westphal2-5/+37
2026-07-24netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dstHaoze Xie2-0/+17
2026-07-24netfilter: xt_cluster: reject template conntracks in hash matchWyatt Feng1-1/+1
2026-07-24netfilter: nfnl_cthelper: apply per-class values when updating policiesDavid Carlier1-2/+2
2026-07-24netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB readMuhammad Bilal1-3/+3
2026-07-24ipvs: ensure inner headers in ICMP errors are in headroomJulian Anastasov1-6/+15
generated by cgit v1.2.3 (git 2.39.0) at 2026-09-02 21:47:23 +0300