aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/net/xfrm
AgeCommit message (Expand)AuthorFilesLines
2026-09-16Merge tag 'ipsec-2026-09-16' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsecJakub Kicinski6-26/+61
2026-09-01net: xfrm: reject unrepresentable espintcp transport headersWyatt Feng1-1/+5
2026-09-01xfrm: save input state data before secpath resetsZhiling Zou1-3/+8
2026-09-01xfrm: hold net_device reference under RCU in bundle creationCen Zhang (Microsoft Security FORGE Labs)1-5/+15
2026-08-24xfrm: use hlist_del_init_rcu for state_cache and state_cache_inputSiwei Zhang1-2/+2
2026-08-20Merge tag 'ipsec-2026-08-18' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsecJakub Kicinski4-14/+54
2026-08-18xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()Eric Dumazet1-0/+11
2026-08-18xfrm: fix compat ALLOCSPI request use-after-freeKyle Zeng1-12/+0
2026-08-18xfrm: iptfs: fix runt reassembly panic from short inner tot_lenHenry Martin1-2/+2
2026-08-18xfrm: add missing RCU read lock in xfrm_send_migrate_state()Aleksandr Nogikh1-1/+5
2026-08-18xfrm: serialize state GC with device state flushChengfeng Ye1-0/+5
2026-08-18xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()Roshan Kumar1-0/+8
2026-08-18xfrm: bound nat keepalive state collectionZihan Xi1-25/+21
2026-08-13net: Const qualify ctl_tables that kmemdup unconditionallyJoel Granados1-1/+1
2026-07-28xfrm: fix xfrm_state_construct() auth-trunc leakZihan Xi1-1/+1
2026-07-23xfrm: Fix skb double-free in xfrm_dev_direct_output()Sanghyun Park1-3/+1
2026-07-23xfrm: avoid lock inversion in nat keepalive workZihan Xi1-9/+48
2026-07-22Merge branch 'big-tcp-for-udp-tunnels'Paolo Abeni1-1/+1
2026-07-22net: Use helpers to get/set UDP len tree-wideAlice Mikityanska1-1/+1
2026-07-20xfrm: drop ESP-in-TCP packets with no ingress deviceZhiling Zou1-0/+6
2026-07-20xfrm: espintcp: fix UAF during closeSabrina Dubroca1-1/+2
2026-07-06xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsertXiang Mei (Microsoft)1-2/+2
2026-07-06xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags()Chen YanJun1-0/+1
2026-07-06xfrm: clear mode callbacks after failed mode setupCen Zhang1-1/+6
2026-07-02xfrm: reject optional IPTFS templates in outbound policiesAntony Antony1-2/+1
2026-07-02xfrm: cache the offload ifindex for netlink dumpsCen Zhang3-9/+31
2026-07-02xfrm: fix sk_dst_cache double-free in xfrm_user_policy()Xiang Mei (Microsoft)1-2/+2
2026-06-30xfrm: nat_keepalive: avoid double free on send errorQianyu Luo1-6/+9
2026-06-26xfrm: fix stale skb->prev after async crypto steals a GSO segmentPetr Wozniak1-0/+8
2026-06-26xfrm: propagate -EINPROGRESS from validate_xmit_xfrm()Petr Wozniak1-2/+2
2026-06-23Merge tag 'ipsec-2026-06-22' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsecJakub Kicinski5-70/+63
2026-06-17xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelinkMaoyi Xie1-0/+3
2026-06-17xfrm: validate selector family and prefixlen during matchEric Dumazet1-0/+3
2026-06-17espintcp: use sk_msg_free_partial to fix partial sendSabrina Dubroca1-27/+7
2026-06-17xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[]Eric Dumazet2-21/+21
2026-06-17xfrm: Fix xfrm state cache insertion raceHerbert Xu1-7/+14
2026-06-13Merge tag 'ipsec-next-2026-06-12' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-nextJakub Kicinski5-117/+540
2026-06-12xfrm: Fix dev use-after-free in xfrm async resumptionDong Chenchen1-13/+16
2026-06-12xfrm: use compat translator only for u64 alignment mismatchSanman Pradhan2-2/+2
2026-06-05xfrm: espintcp: do not reuse an in-progress partial sendWyatt Feng1-0/+4
2026-06-05xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state()Tristan Madani1-3/+2
2026-06-04xfrm: restrict netlink attributes for XFRM_MSG_MIGRATE_STATEAntony Antony1-0/+24
2026-06-04xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migrationAntony Antony4-15/+369
2026-06-04xfrm: make xfrm_dev_state_add xuo parameter constAntony Antony1-1/+1
2026-06-04xfrm: extract address family and selector validation helpersAntony Antony1-36/+44
2026-06-04xfrm: refactor XFRMA_MTIMER_THRESH validation into a helperAntony Antony1-11/+18
2026-06-04xfrm: move encap and xuo into struct xfrm_migrateAntony Antony2-14/+10
2026-06-04xfrm: add error messages to state migrationAntony Antony1-2/+7
2026-06-04xfrm: add state synchronization after migrationAntony Antony1-7/+4
2026-06-04xfrm: check family before comparing addresses in migrateAntony Antony1-3/+4
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.