summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2025-05-08netfilter: ipset: fix region locking in hash typesJozsef Kadlecsik1-1/+1
2025-05-08ipvs: fix uninit-value for saddr in do_output_route4Julian Anastasov1-19/+8
2025-04-17netfilter: conntrack: fix erronous removal of offload bitFlorian Westphal1-4/+6
2025-04-10Merge tag 'net-6.15-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-1/+2
2025-04-10nft_set_pipapo: fix incorrect avx2 match of 5th field octetFlorian Westphal1-1/+2
2025-04-08Merge tag 'crc-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/eb...Linus Torvalds2-3/+3
2025-04-05treewide: Switch/rename to timer_delete[_sync]()Thomas Gleixner6-13/+13
2025-04-04lib/crc: remove CONFIG_LIBCRC32CEric Biggers2-3/+3
2025-04-04Merge tag 'nf-25-04-03' of git://git.kernel.org/pub/scm/linux/kernel/git/netf...Jakub Kicinski3-5/+6
2025-04-04net: fix geneve_opt length integer overflowLin Ma1-1/+1
2025-04-03netfilter: nft_tunnel: fix geneve_opt type confusion additionLin Ma1-2/+2
2025-04-02netfilter: nf_tables: don't unregister hook when table is dormantFlorian Westphal1-2/+2
2025-04-02netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets onlyPablo Neira Ayuso1-1/+2
2025-03-25Merge tag 'nf-next-25-03-23' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski5-19/+20
2025-03-23netfilter: nf_tables: Only use nf_skip_indirect_calls() when MITIGATION_RETPO...WangYuli1-7/+4
2025-03-23netfilter: xtables: Use strscpy() instead of strscpy_pad()Thorsten Blum1-1/+1
2025-03-23netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation errorChenyuan Yang1-1/+1
2025-03-17tcp: extend TCP flags to allow AE bit/ACE fieldIlpo Järvinen1-3/+5
2025-03-13netfilter: nft_exthdr: fix offset with ipv4_find_option()Alexey Kashavkin1-6/+4
2025-03-12netfilter: conntrack: Bound nf_conntrack sysctl writesNicolas Bouchinet1-3/+9
2025-03-12netfilter: xt_hashlimit: replace vmalloc calls with kvmallocDenis Kirjanov1-7/+5
2025-03-12ipvs: prevent integer overflow in do_ip_vs_get_ctl()Dan Carpenter1-4/+4
2025-03-12netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert...Kohei Enju1-0/+2
2025-03-06net: hold netdev instance lock during nft ndo_setup_tcStanislav Fomichev2-2/+2
2025-03-06netfilter: nf_tables: make destruction work queue pernetFlorian Westphal2-14/+18
2025-03-06netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap ...Nicklas Bo Jensen1-2/+2
2025-03-03netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.Sebastian Andrzej Siewior1-2/+4
2025-02-12Revert "netfilter: flowtable: teardown flow if cached mtu is stale"Pablo Neira Ayuso1-6/+2
2025-01-30Merge tag 'net-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-4/+4
2025-01-30Merge tag 'nf-25-01-30' of git://git.kernel.org/pub/scm/linux/kernel/git/netf...Jakub Kicinski1-4/+4
2025-01-30netfilter: nf_tables: reject mismatching sum of field_len with set key lengthPablo Neira Ayuso1-4/+4
2025-01-27Merge tag 'mm-nonmm-stable-2025-01-24-23-16' of git://git.kernel.org/pub/scm/...Linus Torvalds1-13/+8
2025-01-22Merge tag 'net-next-6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/ne...Linus Torvalds17-167/+405
2025-01-22Merge tag 'lsm-pr-20250121' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds3-28/+29
2025-01-19netfilter: flowtable: add CLOSING statePablo Neira Ayuso2-19/+57
2025-01-19netfilter: flowtable: teardown flow if cached mtu is stalePablo Neira Ayuso1-2/+6
2025-01-19netfilter: conntrack: rework offload nf_conn timeout extension logicFlorian Westphal2-8/+103
2025-01-19netfilter: conntrack: remove skb argument from nf_ct_refreshFlorian Westphal6-11/+10
2025-01-19netfilter: nft_flow_offload: update tcp state flags under lockFlorian Westphal1-5/+11
2025-01-19netfilter: nft_flow_offload: clear tcp MAXACK flag before moving to slowpathFlorian Westphal1-2/+12
2025-01-19netfilter: nf_tables: Simplify chain netdev notifierPhil Sutter1-14/+7
2025-01-19netfilter: nf_tables: Tolerate chains with no remaining hooksPhil Sutter2-63/+7
2025-01-19netfilter: nf_tables: Compare netdev hooks based on stored namePhil Sutter1-1/+1
2025-01-19netfilter: nf_tables: Use stored ifname in netdev hook dumpsPhil Sutter1-4/+6
2025-01-19netfilter: nf_tables: Store user-defined hook ifnamePhil Sutter1-3/+7
2025-01-19netfilter: nf_tables: Flowtable hook's pf value never variesPhil Sutter1-7/+4
2025-01-19netfilter: nf_tables: fix set size with rbtree backendPablo Neira Ayuso2-2/+90
2025-01-14Merge tag 'nf-next-25-01-11' of git://git.kernel.org/pub/scm/linux/kernel/git...Paolo Abeni5-27/+84
2025-01-13netfilter: conntrack: cleanup timeout definitionsEaswar Hariharan1-13/+8
2025-01-10Merge tag 'ipsec-next-2025-01-09' of git://git.kernel.org/pub/scm/linux/kerne...David S. Miller1-1/+2