summaryrefslogtreecommitdiff
path: root/net
AgeCommit message (Expand)AuthorFilesLines
29 hoursipv6: seg6: clear IPv4 control block on IPIP decapsulationKyle Zeng1-0/+7
29 hoursxfrm: fix xfrm_state_construct() auth-trunc leakZihan Xi1-1/+1
29 hoursxfrm: ah6: validate routing header segments_leftAsim Viladi Oglu Manizada1-11/+18
29 hoursxfrm: drop ESP-in-TCP packets with no ingress deviceZhiling Zou1-0/+6
29 hoursxfrm: espintcp: fix UAF during closeSabrina Dubroca1-1/+2
29 hoursnfc: nci: add data_len bound checks to activation parameter extractorsBryam Vargas1-4/+24
29 hoursnfc: nci: fix uninit-value in the RF discover/activated NTF handlersSamuel Page1-2/+2
29 hoursipv4: igmp: Fix potential UAF in igmp_gq_start_timer()Eric Dumazet1-5/+9
29 hoursbpf: Remove tst_run from lwt_seg6local_prog_ops.Sebastian Andrzej Siewior1-1/+0
29 hoursipvs: reload ip header after head reallocationFlorian Westphal1-4/+2
29 hoursipv6: mcast: Fix use-after-free when processing MLD queriesIdo Schimmel1-4/+4
6 daysinet: frags: strip GSO state from fragments before reassemblyXinyang Ge1-0/+7
7 dayscan: isotp: fix timer drain order, wakeup handling and tx_gen orderingOliver Hartkopp1-87/+230
7 dayscan: use skb hash instead of private variable in headroomOliver Hartkopp6-15/+14
7 daysxfrm: fix sk_dst_cache double-free in xfrm_user_policy()Xiang Mei (Microsoft)1-2/+2
7 dayslibceph: fix OOB read in decode_watchers() via missing bounds checkPavitra Jha1-1/+4
7 daysipv6: fix use-after-free in ip6_finish_output2()Luxiao Xu1-0/+2
7 daysipv4: reject undersized MTUs in ip_do_fragment()Yong Wang1-0/+4
7 daysnfc: nci: free destination parameters when closing a connectionLinmao Li1-0/+1
7 daysnfc: nci: fix out-of-bounds write in nci_target_auto_activated()Samuel Page1-0/+6
7 daysnfc: llcp: reject PDUs shorter than the LLCP headerDoruk Tan Ozturk1-0/+5
7 daysnfc: llcp: fix OOB read and u8 offset wrap in TLV parsersMuhammad Bilal1-2/+16
7 daysnfc: llcp: bound the connect_sn TLV walk to the skbDoruk Tan Ozturk1-4/+6
7 daysnfc: digital: clamp SENSF_RES length to the destination bufferDoruk Tan Ozturk1-0/+2
7 daysinet: frags: publish queues before arming timerZhiling Zou1-2/+4
7 dayspacket: synchronize pressure clearing with ring reconfigurationZihan Xi1-4/+16
7 daysnet/sched: reject overly deep qdisc hierarchiesZijie Huang1-0/+9
7 dayspacket: use consistent hard_header_len in TX_RING send pathQihang Tang1-8/+11
7 dayspacket: use consistent hard_header_len in non-ring send pathsQihang Tang1-10/+16
7 daysipv4: Fix fib_nlmsg_size() for RTA_VIA nexthopsZihan Xi1-18/+49
7 daysnet: ipv4: Publish fib_nlmsg_size()Amit Cohen2-1/+2
7 daysnet/x25: fix use-after-free of the socket by its timersBaul Lee2-11/+18
7 daysBluetooth: RFCOMM: take rfcomm_mutex for the deferred setup acceptAli Ahmet Memis1-3/+21
11 daysnet: smc: fix splice entry lifetime imbalance in smc_rx_spliceDaming Li1-4/+8
11 daysnet/smc: rdma write inline if qp has sufficient inline spaceGuangguan Wang1-5/+12
11 daysaf_packet: Don't send zero-byte data in tpacket_snd().Eric Dumazet1-0/+3
11 daysnet: packet: fix wrong transport_header when sending VLAN-tagged frameWei Fang1-2/+2
11 daysnetfilter: ipset: fix list type element drift bugFlorian Westphal1-2/+5
11 daysnetfilter: flowtable: publish GC-visible tuple lastJérémy Jean1-3/+4
11 daysnetfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort pathAlexey Velichayshiy1-1/+1
11 daysnetfilter: ipset: fix refcount race between list:set GC and swapXiang Mei (Microsoft)1-6/+13
11 daysnet/sched: act_gact, act_police: range check the fallback control actionHyunjung Ko2-0/+11
11 daysnet: pktgen: fix proc entry use-after-freeChengfeng Ye1-3/+1
11 daysnet: pktgen: fix code style (WARNING: Block comments)Peter Seiderer1-16/+23
11 daysBluetooth: HIDP: reject frames without a transaction headerSangho Lee1-10/+15
11 daysskbuff: introduce skb_pull_dataLuiz Augusto von Dentz1-0/+24
11 daysnet: gro: fix double aggregation of flush-marked skbsShiming Cheng1-1/+3
11 daysnet/sched: serialize qdisc_rtab_list against concurrent get/putAldo Ariel Panzardo1-5/+19
11 dayslibceph: fix two unsafe bare decodes in decode_lockers()Pavitra Jha1-2/+6
11 dayslibceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZEXiang Mei1-2/+2