kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
37 hours	netfilter: require Ethernet MAC header before using eth_hdr()	Zhengchuan Liang	5	-12/+19
37 hours	ipvs: skip ipv6 extension headers for csum checks	Julian Anastasov	3	-39/+20
37 hours	netfilter: nft_fib: fix stale stack leak via the OIFNAME register	Davide Ornaghi	1	-0/+6
37 hours	netfilter: nft_tunnel: fix use-after-free on object destroy	Tristan Madani	1	-1/+1
37 hours	netfilter: ctnetlink: ensure safe access to master conntrack	Pablo Neira Ayuso	3	-10/+30
37 hours	netfilter: nft_exthdr: fix register tracking for F_PRESENT flag	Florian Westphal	1	-0/+3
37 hours	netfilter: nf_log: validate MAC header was set before dumping it	Xiang Mei	1	-2/+2
37 hours	netfilter: nf_conntrack: destroy stale expectfn expectations on unregister	Weiming Shi	3	-0/+22
37 hours	netfilter: nft_ct: bail out on template ct in get eval	Jiayuan Chen	2	-6/+4
37 hours	netfilter: conntrack_irc: fix possible out-of-bounds read	Florian Westphal	1	-2/+2
37 hours	netfilter: synproxy: add mutex to guard hook reference counting	Fernando Fernandez Mancera	1	-6/+18
37 hours	ipvs: clear the svc scheduler ptr early on edit	Julian Anastasov	2	-12/+15
37 hours	netfilter: xt_NFQUEUE: prefer raw_smp_processor_id	Fernando Fernandez Mancera	1	-1/+1
37 hours	netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without dire...	Hamza Mahfooz	1	-1/+2
37 hours	netfilter: nf_tables: fix dst corruption in same register operation	Fernando Fernandez Mancera	2	-7/+24
37 hours	netfilter: bitwise: add support for doing AND, OR and XOR directly	Jeremy Sowden	1	-11/+123
37 hours	netfilter: bitwise: rename some boolean operation functions	Jeremy Sowden	1	-17/+17
37 hours	netfilter: xt_cpu: prefer raw_smp_processor_id	Florian Westphal	1	-1/+1
37 hours	netfilter: synproxy: refresh tcphdr after skb_ensure_writable	Chris Mason	1	-0/+2
2026-06-01	netfilter: nft_inner: Fix IPv6 inner_thoff desync	Yizhou Zhao	1	-1/+0
2026-06-01	netfilter: ipset: stop hash:* range iteration at end	Nan Li	4	-4/+17
2026-06-01	netfilter: nf_queue: hold bridge skb->dev while queued	Haoze Xie	2	-1/+5
2026-05-23	netfilter: nf_tables: unconditionally bump set->nelems before insertion	Pablo Neira Ayuso	1	-13/+15
2026-05-23	netfilter: nft_ct: fix missing expect put in obj eval	Li Xiasong	1	-0/+2
2026-05-23	netfilter: nf_conntrack_sip: get helper before allocating expectation	Li Xiasong	1	-4/+4
2026-05-23	netfilter: skip recording stale or retransmitted INIT	Xin Long	1	-3/+7
2026-05-23	netfilter: nf_conntrack_sip: don't use simple_strtoul	Florian Westphal	2	-34/+119
2026-05-23	netfilter: xt_policy: fix strict mode inbound policy matching	Jiexun Wang	1	-1/+1
2026-05-23	netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check	Fernando Fernandez Mancera	1	-15/+7
2026-05-23	netfilter: nfnetlink_osf: fix out-of-bounds read on option matching	Fernando Fernandez Mancera	1	-11/+8
2026-05-23	ipvs: fix MTU check for GSO packets in tunnel mode	Yingnan Zhang	1	-4/+15
2026-05-23	netfilter: xtables: restrict several matches to inet family	Pablo Neira Ayuso	4	-34/+68
2026-05-23	netfilter: conntrack: remove sprintf usage	Florian Westphal	2	-16/+19
2026-05-23	netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO	Xiang Mei	1	-0/+4
2026-05-23	netfilter: nft_osf: restrict it to ipv4	Pablo Neira Ayuso	1	-1/+5
2026-05-23	netfilter: nft_fwd_netdev: check ttl/hl before forwarding	Florian Westphal	1	-0/+10
2026-05-23	netfilter: xt_socket: enable defrag after all other checks	Florian Westphal	1	-17/+6
2026-05-17	netfilter: reject zero shift in nft_bitwise	Kai Ma	1	-1/+2
2026-04-27	nf_tables: nft_dynset: fix possible stateful expression memleak in error path	Pablo Neira Ayuso	2	-3/+11
2026-04-27	netfilter: conntrack: add missing netlink policy validations	Florian Westphal	2	-2/+3
2026-04-27	netfilter: xt_multiport: validate range encoding in checkentry	Ren Wei	1	-4/+30
2026-04-27	netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator	Xiang Mei	1	-4/+4
2026-04-27	ipvs: fix NULL deref in ip_vs_add_service error path	Weiming Shi	1	-1/+0
2026-04-27	netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry	Florian Westphal	1	-10/+10
2026-04-18	netfilter: nft_ct: fix use-after-free in timeout object destroy	Tuan Do	1	-1/+1
2026-04-18	netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR	Florian Westphal	1	-6/+14
2026-04-11	netfilter: ipset: drop logically empty buckets in mtype_del	Yifan Wu	1	-1/+1
2026-04-11	netfilter: nf_tables: reject immediate NF_QUEUE verdict	Pablo Neira Ayuso	1	-2/+5
2026-04-11	netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for N...	Pablo Neira Ayuso	1	-0/+23
2026-04-11	netfilter: ctnetlink: ignore explicit helper on new expectations	Pablo Neira Ayuso	1	-45/+9