summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2026-08-23netfilter: ipset: let destroy callbacks adjust ext mem sizeFlorian Westphal
2026-08-23netfilter: ipset: fix list type element drift bugFlorian Westphal
2026-08-23netfilter: flowtable: publish GC-visible tuple lastJérémy Jean
2026-08-23netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort pathAlexey Velichayshiy
2026-08-23netfilter: ipset: fix refcount race between list:set GC and swapXiang Mei (Microsoft)
2026-08-23ipvs: separate destination availability stateYizhou Zhao
2026-08-19netfilter: nf_conntrack: defer invalid log until after unlockZihan Xi
2026-08-19ipvs: clear IPv4 options after rebasing tunnel ICMP errorsKyle Zeng
2026-08-19ipvs: properly update the overload flag on dest editJulian Anastasov
2026-08-19ipvs: add totalconns for destJulian Anastasov
2026-08-19ipvs: stop estimator after disabled calc phaseZhiling Zou
2026-08-19ipvs: return the csum validation for forward hookJulian Anastasov
2026-08-19ipvs: avoid out-of-bounds write in ip_vs_nat_icmpJulian Anastasov
2026-08-19netfilter: ipset: switch ext_size to atomic64_tJozsef Kadlecsik
2026-08-09sysctl: treewide: constify ctl_table_header::ctl_table_argThomas Weißschuh
2026-08-09netfilter: nf_tables: clone set on flush onlyPablo Neira Ayuso
2026-08-09netfilter: ipset: do not update comments from kernel-side hash addsDavid Lee
2026-08-09ipvs: do not propagate one-packet flag to synced connsZhiling Zou
2026-08-09netfilter: nft_payload: fix mask build for partial field offloadXiang Mei (Microsoft)
2026-08-09ipvs: do not mangle ICMP replies for non-first fragmentsJulian Anastasov
2026-08-09ipvs: fix places with wrong packet offsetsJulian Anastasov
2026-08-09ipvs: fix the checksum validationsJulian Anastasov
2026-08-09netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCHPablo Neira Ayuso
2026-08-09netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()Xiang Mei
2026-08-09netfilter: nf_conntrack_expect: restore helper propagation via expectationPablo Neira Ayuso
2026-08-03netfilter: nft_fib: reject fib expression on the netdev egress hookTheodor Arsenij Larionov-Trichkine
2026-08-03netfilter: nf_tables: remove register tracking infrastructureFlorian Westphal
2026-08-03netfilter: nf_conntrack_sip: validate skb_dst() before accessing itPablo Neira Ayuso
2026-08-03netfilter: nf_conntrack_sip: remove net variable shadowingFlorian Westphal
2026-08-03netfilter: nft_set_pipapo: don't leak bad clone into future transactionFlorian Westphal
2026-08-03netfilter: nft_set_pipapo: move cloning of match info to insert/removal pathFlorian Westphal
2026-08-03netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand cloneFlorian Westphal
2026-08-03netfilter: nft_set_pipapo: merge deactivate helper into callerFlorian Westphal
2026-08-03netfilter: nft_set_pipapo: prepare walk function for on-demand cloneFlorian Westphal
2026-08-03netfilter: nft_set_pipapo: make pipapo_clone helper return NULLFlorian Westphal
2026-08-03netfilter: nft_set_pipapo: move prove_locking helper aroundFlorian Westphal
2026-08-03netfilter: nft_set_pipapo: use GFP_KERNEL for insertionsFlorian Westphal
2026-07-24audit: add audit_log_nf_skb helper functionRicardo Robaina
2026-07-24ipvs: reload ip header after head reallocationFlorian Westphal
2026-07-24ipvs: fix more places with wrong ipv6 transport offsetsJulian Anastasov
2026-07-24ipvs: reset full ip_vs_seq structs in ip_vs_conn_newYizhou Zhao
2026-07-24ipvs: use parsed transport offset in SCTP state lookupYizhou Zhao
2026-07-24netfilter: xt_nat: reject unsupported target familiesWyatt Feng
2026-07-24netfilter: ecache: fix inverted time_after() checkYizhou Zhao
2026-07-24netfilter: nf_conncount: fix zone comparison in tuple dedupYizhou Zhao
2026-07-24netfilter: nf_nat_sip: reload possible stale data pointerFlorian Westphal
2026-07-24netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dstHaoze Xie
2026-07-24netfilter: xt_cluster: reject template conntracks in hash matchWyatt Feng
2026-07-24netfilter: nfnl_cthelper: apply per-class values when updating policiesDavid Carlier
2026-07-24netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB readMuhammad Bilal