summaryrefslogtreecommitdiff
path: root/net
AgeCommit message (Expand)AuthorFilesLines
5 daysinet: frags: strip GSO state from fragments before reassemblyXinyang Ge1-0/+7
6 daysnet: gro: properly validate BIG TCP aggregation criteriaEric Dumazet1-2/+5
6 daysBluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255Ali Ahmet Memis1-0/+8
6 daysBluetooth: ISO: zero the sockaddr before returning it in getnameAli Ahmet Memis1-0/+2
6 daysBluetooth: ISO: do not force BT_LISTEN after a failed BIG syncAli Ahmet Memis1-8/+22
6 daysBluetooth: hci_sync: Fix accept list UAF during suspendChengfeng Ye1-9/+37
6 daysBluetooth: hci_event: validate LE Set CIG Parameters responseLaxman Acharya Padhya1-2/+4
6 daysBluetooth: hci_event: fix LE list UAF on resetChengfeng Ye1-0/+2
6 daysxfrm: fix sk_dst_cache double-free in xfrm_user_policy()Xiang Mei (Microsoft)1-2/+2
6 daysmptcp: pm: fix memory leak from alloc-during-teardown raceShardul Bankar3-5/+19
6 daysmptcp: pm: uniform announced addresses helpersMatthieu Baerts (NGI0)6-34/+33
6 daysmptcp: pm: rename add_entry structure to add_addrMatthieu Baerts (NGI0)2-12/+12
6 daysmptcp: pm: use for_each_subflow helperMatthieu Baerts (NGI0)4-12/+12
6 daysipv6: fix use-after-free in ip6_finish_output2()Luxiao Xu1-0/+2
6 daysipv4: reject undersized MTUs in ip_do_fragment()Yong Wang1-0/+4
6 daysnfc: nci: free destination parameters when closing a connectionLinmao Li1-0/+1
6 daysnfc: nci: fix uninit-value in the RF discover/activated NTF handlersSamuel Page1-2/+2
6 daysnfc: nci: fix out-of-bounds write in nci_target_auto_activated()Samuel Page1-0/+6
6 daysnfc: nci: add data_len bound checks to activation parameter extractorsBryam Vargas1-4/+22
6 daysnfc: llcp: reject PDUs shorter than the LLCP headerDoruk Tan Ozturk1-0/+5
6 daysnfc: llcp: fix OOB read and u8 offset wrap in TLV parsersMuhammad Bilal1-2/+16
6 daysnfc: llcp: bound the connect_sn TLV walk to the skbDoruk Tan Ozturk1-4/+6
6 daysnfc: digital: clamp SENSF_RES length to the destination bufferDoruk Tan Ozturk1-0/+2
6 dayslibceph: fix OOB read in decode_watchers() via missing bounds checkPavitra Jha1-1/+4
6 daysBluetooth: RFCOMM: take rfcomm_mutex for the deferred setup acceptAli Ahmet Memis1-3/+21
10 daysnet/sched: cls_bpf: reject dev-bound programs bound to a different deviceJamal Hadi Salim1-2/+16
10 daysnet/sched: cls_u32: skip hash tables in u32_bind_class()Zhang Changzhong1-0/+3
10 daysnet/sched: act_api: fix TOCTOU NULL deref on a->goto_chainJamal Hadi Salim1-5/+5
10 daysaf_packet: Don't send zero-byte data in tpacket_snd().Eric Dumazet1-0/+3
10 daysnet/tls: Fail tls_sw_splice_read() after a failed async decryptChuck Lever1-0/+5
10 daysnet: packet: fix wrong transport_header when sending VLAN-tagged frameWei Fang1-2/+2
10 daystcp: fix icsk_ack.ato bitfield overflowJiayuan Chen2-4/+6
10 daysnetfilter: ipset: let destroy callbacks adjust ext mem sizeFlorian Westphal2-3/+2
10 daysnetfilter: ipset: fix list type element drift bugFlorian Westphal1-2/+5
10 daysnetfilter: flowtable: publish GC-visible tuple lastJérémy Jean1-3/+4
10 daysnetfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort pathAlexey Velichayshiy1-1/+1
10 daysnetfilter: ipset: fix refcount race between list:set GC and swapXiang Mei (Microsoft)1-6/+13
10 daysnet/sched: serialize qdisc_rtab_list against concurrent get/putAldo Ariel Panzardo1-5/+19
10 dayslibceph: fix two unsafe bare decodes in decode_lockers()Pavitra Jha1-2/+6
10 dayslibceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZEXiang Mei1-2/+2
10 dayslibceph: Amend checking to fix `make W=1` build breakageAndy Shevchenko1-2/+2
10 dayslibceph: tolerate addrvecs with multiple entries of the same typeKefu Chai1-9/+9
10 dayslibceph: Avoid using invalid osd indices from primary_tempRaphael Zimmer1-2/+3
10 dayslibceph: fix multiple unsafe decodes in decode_locker()Pavitra Jha1-4/+9
10 daysmptcp: fastopen: only mark MPTFO subflows with SYN dataWyatt Feng1-3/+4
10 daysmptcp: pm: fix data race in add_addr timer callbackQing Luo1-2/+4
10 daysmptcp: options: reset DSS fields in case of unexpected sizeMatthieu Baerts (NGI0)1-1/+7
10 daysmptcp: avoid combining some incoming suboptionsMatthieu Baerts (NGI0)2-1/+59
10 daysmptcp: reclaim forward-allocated memory on RX path errorsPaolo Abeni1-0/+6
10 daysipvs: separate destination availability stateYizhou Zhao6-14/+14