linux-stable.git - Linux kernel stable tree

Age	Commit message (Expand)	Author
2024-01-31	netfilter: nf_tables: reject QUEUE/DROP verdict parameters	Florian Westphal
2024-01-31	netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain	Pablo Neira Ayuso
2024-01-31	netfilter: nf_tables: validate NFPROTO_* family	Pablo Neira Ayuso
2024-01-31	netfilter: nf_tables: restrict anonymous set and map names to 16 bytes	Florian Westphal
2024-01-31	netfilter: nft_limit: reject configurations that cause integer overflow	Florian Westphal
2024-01-25	ipvs: avoid stat macros calls from preemptible context	Fedor Pchelkin
2024-01-25	netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description	Pablo Neira Ayuso
2024-01-25	netfilter: nf_tables: skip dead set elements in netlink dump	Pablo Neira Ayuso
2024-01-25	netfilter: nf_tables: do not allow mismatch field size and set key length	Pablo Neira Ayuso
2024-01-25	netfilter: propagate net to nf_bridge_get_physindev	Pavel Tikhomirov
2024-01-25	netfilter: nf_queue: remove excess nf_bridge variable	Pavel Tikhomirov
2024-01-25	netfilter: nfnetlink_log: use proper helper for fetching physinif	Pavel Tikhomirov
2024-01-25	netfilter: nft_limit: do not ignore unsupported flags	Pablo Neira Ayuso
2024-01-25	netfilter: nf_tables: reject invalid set policy	Pablo Neira Ayuso
2024-01-25	netfilter: nf_tables: check if catch-all set element is active in next genera...	Pablo Neira Ayuso
2024-01-25	netfilter: nf_tables: mark newset as dead on transaction abort	Florian Westphal
2024-01-10	netfilter: flowtable: GC pushes back packets to classic path	Pablo Neira Ayuso
2024-01-10	net/sched: act_ct: Fix promotion of offloaded unreplied tuple	Paul Blakey
2024-01-10	netfilter: flowtable: cache info of last offload	Vlad Buslov
2024-01-10	netfilter: flowtable: allow unidirectional rules	Vlad Buslov
2024-01-10	netfilter: nft_immediate: drop chain reference counter on error	Pablo Neira Ayuso
2024-01-10	netfilter: nf_tables: set transport offset from mac header for netdev/egress	Pablo Neira Ayuso
2024-01-10	netfilter: use skb_ip_totlen and iph_totlen	Xin Long
2024-01-05	netfilter: nf_tables: skip set commit for deleted/destroyed sets	Pablo Neira Ayuso
2023-12-13	netfilter: nft_set_pipapo: skip inactive elements during set walk	Florian Westphal
2023-12-13	netfilter: xt_owner: Fix for unsafe access of sk->sk_socket	Phil Sutter
2023-12-13	netfilter: nf_tables: validate family when identifying table via handle	Pablo Neira Ayuso
2023-12-13	netfilter: nf_tables: bail out on mismatching dynset and set expressions	Pablo Neira Ayuso
2023-12-13	netfilter: nf_tables: fix 'exist' matching on bigendian arches	Florian Westphal
2023-12-13	netfilter: nft_exthdr: add boolean DCCP option matching	Jeremy Sowden
2023-12-13	netfilter: ipset: fix race condition between swap/destroy and kernel side add...	Jozsef Kadlecsik
2023-11-28	netfilter: nf_tables: split async and sync catchall in two functions	Pablo Neira Ayuso
2023-11-28	netfilter: nf_tables: remove catchall element in GC sync path	Pablo Neira Ayuso
2023-11-28	netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()	Dan Carpenter
2023-11-20	netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses	Florian Westphal
2023-11-20	netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate e...	Jeremy Sowden
2023-11-20	netfilter: xt_recent: fix (increase) ipv6 literal buffer length	Maciej Żenczykowski
2023-11-20	netfilter: nf_tables: Drop pointless memset when dumping rules	Phil Sutter
2023-11-08	netfilter: nf_tables: audit log object reset once per table	Phil Sutter
2023-11-08	netfilter: nfnetlink_log: silence bogus compiler warning	Florian Westphal
2023-10-25	netfilter: nf_tables: revert do not remove elements if set backend implements...	Pablo Neira Ayuso
2023-10-25	netfilter: nf_tables: do not remove elements if set backend implements .abort	Pablo Neira Ayuso
2023-10-25	netfilter: nft_set_rbtree: .deactivate fails if element has expired	Pablo Neira Ayuso
2023-10-25	netfilter: nft_payload: fix wrong mac header matching	Florian Westphal
2023-10-19	net: prevent address rewrite in kernel_bind()	Jordan Rife
2023-10-10	netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure	Florian Westphal
2023-10-10	netfilter: nf_tables: Deduplicate nft_register_obj audit logs	Phil Sutter
2023-10-10	netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp	Xin Long
2023-10-10	net: replace calls to sock->ops->connect() with kernel_connect()	Jordan Rife
2023-10-06	netfilter: nf_tables: fix kdoc warnings after gc rework	Florian Westphal