linux-stable.git - Linux kernel stable tree

Age	Commit message (Expand)	Author
2022-11-10	netfilter: ipset: enforce documented limit to prevent allocating huge memory	Jozsef Kadlecsik
2022-11-10	ipvs: fix WARNING in ip_vs_app_net_cleanup()	Zhengchao Shao
2022-11-10	ipvs: fix WARNING in __ip_vs_cleanup_batch()	Zhengchao Shao
2022-11-10	ipvs: use explicitly signed chars	Jason A. Donenfeld
2022-11-10	netfilter: nf_tables: release flow rule object from commit path	Pablo Neira Ayuso
2022-11-10	netfilter: nf_tables: netlink notifier might race to release objects	Pablo Neira Ayuso
2022-10-29	netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements	Pablo Neira Ayuso
2022-10-26	netfilter: conntrack: revisit the gc initial rescheduling bias	Antoine Tenart
2022-10-26	netfilter: conntrack: fix the gc rescheduling delay	Antoine Tenart
2022-09-28	netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()	Tetsuo Handa
2022-09-28	netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()	Tetsuo Handa
2022-09-28	netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()	Pablo Neira Ayuso
2022-09-28	netfilter: nf_conntrack_irc: Tighten matching on DCC message	David Leadbeater
2022-09-28	netfilter: nf_conntrack_sip: fix ct_sip_walk_headers	Igor Ryzhov
2022-09-15	netfilter: nf_conntrack_irc: Fix forged IP logic	David Leadbeater
2022-09-15	netfilter: nf_tables: clean up hook list when offload flags check fails	Pablo Neira Ayuso
2022-09-15	netfilter: conntrack: work around exceeded receive window	Florian Westphal
2022-09-05	netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y	Geert Uytterhoeven
2022-08-31	net: Fix data-races around sysctl_[rw]mem_(max\|default).	Kuniyuki Iwashima
2022-08-31	netfilter: flowtable: fix stuck flows on cleanup due to pending work	Pablo Neira Ayuso
2022-08-31	netfilter: flowtable: add function to invoke garbage collection immediately	Pablo Neira Ayuso
2022-08-31	netfilter: nf_tables: disallow binding to already bound chain	Pablo Neira Ayuso
2022-08-31	netfilter: nf_tables: disallow jump to implicit chain from set element	Pablo Neira Ayuso
2022-08-31	netfilter: nf_tables: upfront validation of data via nft_data_init()	Pablo Neira Ayuso
2022-08-31	netfilter: bitwise: improve error goto labels	Jeremy Sowden
2022-08-31	netfilter: nft_cmp: optimize comparison for 16-bytes	Pablo Neira Ayuso
2022-08-31	netfilter: nf_tables: consolidate rule verdict trace call	Pablo Neira Ayuso
2022-08-31	netfilter: nft_tunnel: restrict it to netdev family	Pablo Neira Ayuso
2022-08-31	netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families	Pablo Neira Ayuso
2022-08-31	netfilter: nf_tables: do not leave chain stats enabled on error	Pablo Neira Ayuso
2022-08-31	netfilter: nft_payload: do not truncate csum_offset and csum_type	Pablo Neira Ayuso
2022-08-31	netfilter: nft_payload: report ERANGE for too long offset and length	Pablo Neira Ayuso
2022-08-31	netfilter: nf_tables: make table handle allocation per-netns friendly	Pablo Neira Ayuso
2022-08-31	netfilter: nf_tables: disallow updates of implicit chain	Pablo Neira Ayuso
2022-08-25	netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified	Pablo Neira Ayuso
2022-08-25	netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVA...	Pablo Neira Ayuso
2022-08-25	netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flags	Pablo Neira Ayuso
2022-08-25	netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag	Pablo Neira Ayuso
2022-08-25	netfilter: nf_tables: really skip inactive sets when allocating name	Pablo Neira Ayuso
2022-08-25	netfilter: nf_tables: possible module reference underflow in error path	Pablo Neira Ayuso
2022-08-25	netfilter: nf_tables: disallow NFTA_SET_ELEM_KEY_END with NFT_SET_ELEM_INTERV...	Pablo Neira Ayuso
2022-08-25	netfilter: nf_tables: use READ_ONCE and WRITE_ONCE for shared generation id a...	Pablo Neira Ayuso
2022-08-17	netfilter: nf_tables: fix null deref due to zeroed list head	Florian Westphal
2022-08-17	netfilter: nf_tables: do not allow RULE_ID to refer to another chain	Thadeu Lima de Souza Cascardo
2022-08-17	netfilter: nf_tables: do not allow CHAIN_ID to refer to another table	Thadeu Lima de Souza Cascardo
2022-08-17	netfilter: nf_tables: do not allow SET_ID to refer to another table	Thadeu Lima de Souza Cascardo
2022-08-03	netfilter: nf_queue: do not allow packet truncation below transport header of...	Florian Westphal
2022-07-29	net: netfilter: use kfree_drop_reason() for NF_DROP	Menglong Dong
2022-07-29	ip: Fix data-races around sysctl_ip_default_ttl.	Kuniyuki Iwashima
2022-07-21	netfilter: nf_tables: replace BUG_ON by element length check	Pablo Neira Ayuso