kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
3 days	netfilter: nft_fib: reject fib expression on the netdev egress hook	Theodor Arsenij Larionov-Trichkine	2	-1/+37
3 days	netfilter: nf_tables: remove register tracking infrastructure	Florian Westphal	41	-627/+0
3 days	netfilter: nf_conntrack_sip: validate skb_dst() before accessing it	Pablo Neira Ayuso	1	-2/+5
3 days	netfilter: nf_conntrack_sip: remove net variable shadowing	Florian Westphal	1	-2/+1
3 days	netfilter: nft_set_pipapo: don't leak bad clone into future transaction	Florian Westphal	2	-5/+37
3 days	netfilter: nft_set_pipapo: move cloning of match info to insert/removal path	Florian Westphal	1	-21/+49
3 days	netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone	Florian Westphal	1	-10/+15
3 days	netfilter: nft_set_pipapo: merge deactivate helper into caller	Florian Westphal	1	-30/+9
3 days	netfilter: nft_set_pipapo: prepare walk function for on-demand clone	Florian Westphal	1	-21/+39
3 days	netfilter: nft_set_pipapo: make pipapo_clone helper return NULL	Florian Westphal	1	-7/+7
3 days	netfilter: nft_set_pipapo: move prove_locking helper around	Florian Westphal	1	-11/+11
3 days	netfilter: nft_set_pipapo: use GFP_KERNEL for insertions	Florian Westphal	1	-7/+10
12 days	audit: add audit_log_nf_skb helper function	Ricardo Robaina	2	-114/+2
12 days	ipvs: reload ip header after head reallocation	Florian Westphal	1	-4/+2
12 days	ipvs: fix more places with wrong ipv6 transport offsets	Julian Anastasov	2	-8/+5
12 days	ipvs: reset full ip_vs_seq structs in ip_vs_conn_new	Yizhou Zhao	1	-2/+2
12 days	ipvs: use parsed transport offset in SCTP state lookup	Yizhou Zhao	1	-10/+5
12 days	netfilter: xt_nat: reject unsupported target families	Wyatt Feng	1	-0/+9
12 days	netfilter: ecache: fix inverted time_after() check	Yizhou Zhao	1	-1/+1
12 days	netfilter: nf_conncount: fix zone comparison in tuple dedup	Yizhou Zhao	1	-3/+3
12 days	netfilter: nf_nat_sip: reload possible stale data pointer	Florian Westphal	1	-0/+11
12 days	netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst	Haoze Xie	2	-0/+17
12 days	netfilter: xt_cluster: reject template conntracks in hash match	Wyatt Feng	1	-1/+1
12 days	netfilter: nfnl_cthelper: apply per-class values when updating policies	David Carlier	1	-2/+2
12 days	netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read	Muhammad Bilal	1	-3/+3
12 days	ipvs: ensure inner headers in ICMP errors are in headroom	Julian Anastasov	1	-6/+15
12 days	ipvs: fix PMTU for GUE/GRE tunnel ICMP errors	Yizhou Zhao	1	-3/+3
12 days	ipvs: use parsed transport offset in TCP state lookup	Yizhou Zhao	1	-7/+1
12 days	ipvs: pass parsed transport offset to state handlers	Yizhou Zhao	4	-8/+11
12 days	netfilter: xt_connmark: reject invalid shift parameters	Wyatt Feng	1	-2/+12
12 days	netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()	Feng Wu	1	-1/+1
12 days	netfilter: xt_u32: reject invalid shift counts	Wyatt Feng	1	-1/+11
12 days	netfilter: nft_compat: ebtables emulation must reject non-bridge targets	Florian Westphal	1	-3/+21
12 days	netfilter: nft_synproxy: stop bypassing the priv->info snapshot	Runyu Xiao	1	-5/+4
12 days	netfilter: nf_conncount: prevent connlimit drops for early confirmed ct	Fernando Fernandez Mancera	1	-6/+5
12 days	netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()	Mathias Krause	1	-0/+10
12 days	netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()	Jozsef Kadlecsik	1	-2/+2
12 days	netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types	Jozsef Kadlecsik	1	-5/+5
12 days	netfilter: ipset: annotate "pos" for concurrent readers/writers	Jozsef Kadlecsik	1	-24/+38
12 days	netfilter: ipset: Fix data race between add and dump in all hash types	Jozsef Kadlecsik	1	-2/+5
12 days	netfilter: nf_conncount: callers must hold rcu read lock	Florian Westphal	1	-3/+3
12 days	netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp	Pablo Neira Ayuso	1	-2/+16
12 days	netfilter: conntrack: revert ct extension genid infrastructure	Pablo Neira Ayuso	2	-91/+2
12 days	netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock	Fernando Fernandez Mancera	1	-0/+2
12 days	netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures	Fernando Fernandez Mancera	1	-5/+1
12 days	netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump	Pratham Gupta	1	-1/+1
12 days	netfilter: ipset: fix race between dump and ip_set_list resize	Xiang Mei	1	-1/+7
2026-07-04	netfilter: nf_tables: always walk all pending catchall elements	Florian Westphal	1	-2/+0
2026-06-19	netfilter: require Ethernet MAC header before using eth_hdr()	Zhengchuan Liang	5	-12/+19
2026-06-19	ipvs: skip ipv6 extension headers for csum checks	Julian Anastasov	3	-39/+20