aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2026-05-22netfilter: nf_tables: fix dst corruption in same register operationFernando Fernandez Mancera2-7/+24
2026-05-22netfilter: disable payload mangling in usernsFlorian Westphal2-2/+7
2026-05-22netfilter: xt_cpu: prefer raw_smp_processor_idFlorian Westphal1-1/+1
2026-05-22netfilter: nf_conntrack_gre: fix gre keymap list corruptionFlorian Westphal3-30/+90
2026-05-22netfilter: synproxy: refresh tcphdr after skb_ensure_writableChris Mason1-0/+2
2026-05-22netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction checkHamza Mahfooz1-1/+2
2026-05-16netfilter: nf_queue: hold bridge skb->dev while queuedHaoze Xie2-1/+5
2026-05-16netfilter: ipset: annotate "pos" for concurrent readers/writersJozsef Kadlecsik1-24/+38
2026-05-16netfilter: ipset: Fix data race between add and dump in all hash typesJozsef Kadlecsik1-2/+5
2026-05-16netfilter: ipset: Fix data race between add and list header in all hash typesJozsef Kadlecsik1-2/+2
2026-05-16netfilter: nft_inner: release local_lock before re-enabling softirqsFlorian Westphal1-1/+1
2026-05-16netfilter: ipset: stop hash:* range iteration at endNan Li4-4/+17
2026-05-16netfilter: nft_inner: Fix IPv6 inner_thoff desyncYizhou Zhao1-1/+0
2026-05-16netfilter: ipset: fix a potential dump-destroy raceJozsef Kadlecsik1-0/+1
2026-05-16ipvs: avoid possible loop in ip_vs_dst_event on resizingJulian Anastasov1-65/+122
2026-05-16netfilter: nf_conntrack_helper: fix possible null deref during error logFlorian Westphal1-5/+8
2026-05-08netfilter: nft_ct: fix missing expect put in obj evalLi Xiasong1-0/+2
2026-05-08netfilter: nf_conntrack_sip: get helper before allocating expectationLi Xiasong1-4/+4
2026-05-08netfilter: ctnetlink: check tuple and mask in expectations created via nfqueuePablo Neira Ayuso1-0/+3
2026-05-08netfilter: nf_conntrack_expect: restore helper propagation via expectationPablo Neira Ayuso7-11/+35
2026-05-08netfilter: x_tables: add and use xtables_unregister_table_exitFlorian Westphal1-19/+62
2026-05-08netfilter: x_tables: add and use xt_unregister_table_pre_exitFlorian Westphal1-0/+29
2026-05-08netfilter: x_tables: allocate hook ops while under mutexFlorian Westphal1-8/+42
2026-05-08netfilter: x_tables: allow initial table replace without emitting audit log messageFlorian Westphal1-9/+20
2026-05-05ipvs: Guard access of HK_TYPE_KTHREAD cpumask with RCUWaiman Long1-5/+8
2026-05-05ipvs: fix shift-out-of-bounds in ip_vs_rht_desired_sizeJulian Anastasov1-1/+1
2026-05-05ipvs: fix races around est_mutex and est_cpulistJulian Anastasov2-44/+90
2026-05-05ipvs: do not leak dest after get from dest trashJulian Anastasov1-13/+24
2026-05-05ipvs: fix the spin_lock usage for RT buildJulian Anastasov1-32/+40
2026-05-05ipvs: fix races around the conn_lfactor and svc_lfactor sysctl varsJulian Anastasov2-4/+10
2026-05-05ipvs: fixes for the new ip_vs_status infoJulian Anastasov1-15/+36
2026-05-01netfilter: flowtable: use skb_pull_rcsum() to pop vlan/pppoe headerPablo Neira Ayuso1-2/+2
2026-05-01netfilter: flowtable: fix inline pppoe encapsulation in xmit pathPablo Neira Ayuso3-4/+46
2026-05-01netfilter: flowtable: fix inline vlan encapsulation in xmit pathPablo Neira Ayuso1-37/+73
2026-04-30netfilter: flowtable: ensure sufficient headroom in xmit pathPablo Neira Ayuso1-2/+11
2026-04-30netfilter: xtables: fix L4 header parsing for non-first fragmentsFernando Fernandez Mancera5-3/+23
2026-04-30netfilter: nf_tables: skip L4 header parsing for non-first fragmentsFernando Fernandez Mancera4-7/+7
2026-04-30netfilter: nf_tables: fix netdev hook allocation memleak with dormant tablesFlorian Westphal1-14/+20
2026-04-30netfilter: xt_CT: fix usersize for v1 and v2 revisionFlorian Westphal1-4/+4
2026-04-30netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validatePablo Neira Ayuso2-10/+36
2026-04-30netfilter: x_tables: add .check_hooks to matches and targetsPablo Neira Ayuso7-59/+179
2026-04-30netfilter: nft_fwd_netdev: use recursion counter in neigh egress pathWeiming Shi2-16/+8
2026-04-30netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwardingPablo Neira Ayuso1-2/+14
2026-04-30netfilter: replace skb_try_make_writable() by skb_ensure_writable()Pablo Neira Ayuso2-4/+5
2026-04-28netfilter: skip recording stale or retransmitted INITXin Long1-3/+7
2026-04-24netfilter: nf_conntrack_sip: don't use simple_strtoulFlorian Westphal2-34/+119
2026-04-24netfilter: reject zero shift in nft_bitwiseKai Ma1-1/+2
2026-04-24netfilter: xt_policy: fix strict mode inbound policy matchingJiexun Wang1-1/+1
2026-04-21netfilter: nf_tables: add hook transactions for device deletionsPablo Neira Ayuso1-60/+204
2026-04-21netfilter: nf_tables: join hook list via splice_list_rcu() in commit phasePablo Neira Ayuso1-4/+4
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.