index
:
linux-stable.git
linux-2.6.11.y
linux-2.6.12.y
linux-2.6.13.y
linux-2.6.14.y
linux-2.6.15.y
linux-2.6.16.y
linux-2.6.17.y
linux-2.6.18.y
linux-2.6.19.y
linux-2.6.20.y
linux-2.6.21.y
linux-2.6.22.y
linux-2.6.23.y
linux-2.6.24.y
linux-2.6.25.y
linux-2.6.26.y
linux-2.6.27.y
linux-2.6.28.y
linux-2.6.29.y
linux-2.6.30.y
linux-2.6.31.y
linux-2.6.32.y
linux-2.6.33.y
linux-2.6.34.y
linux-2.6.35.y
linux-2.6.36.y
linux-2.6.37.y
linux-2.6.38.y
linux-2.6.39.y
linux-3.0.y
linux-3.1.y
linux-3.10.y
linux-3.11.y
linux-3.12.y
linux-3.13.y
linux-3.14.y
linux-3.15.y
linux-3.16.y
linux-3.17.y
linux-3.18.y
linux-3.19.y
linux-3.2.y
linux-3.3.y
linux-3.4.y
linux-3.5.y
linux-3.6.y
linux-3.7.y
linux-3.8.y
linux-3.9.y
linux-4.0.y
linux-4.1.y
linux-4.10.y
linux-4.11.y
linux-4.12.y
linux-4.13.y
linux-4.14.y
linux-4.15.y
linux-4.16.y
linux-4.17.y
linux-4.18.y
linux-4.19.y
linux-4.2.y
linux-4.20.y
linux-4.3.y
linux-4.4.y
linux-4.5.y
linux-4.6.y
linux-4.7.y
linux-4.8.y
linux-4.9.y
linux-5.0.y
linux-5.1.y
linux-5.10.y
linux-5.11.y
linux-5.12.y
linux-5.13.y
linux-5.14.y
linux-5.15.y
linux-5.16.y
linux-5.17.y
linux-5.18.y
linux-5.19.y
linux-5.2.y
linux-5.3.y
linux-5.4.y
linux-5.5.y
linux-5.6.y
linux-5.7.y
linux-5.8.y
linux-5.9.y
linux-6.0.y
linux-6.1.y
linux-6.10.y
linux-6.11.y
linux-6.12.y
linux-6.13.y
linux-6.14.y
linux-6.15.y
linux-6.16.y
linux-6.17.y
linux-6.18.y
linux-6.19.y
linux-6.2.y
linux-6.3.y
linux-6.4.y
linux-6.5.y
linux-6.6.y
linux-6.7.y
linux-6.8.y
linux-6.9.y
linux-7.0.y
linux-7.1.y
linux-rolling-lts
linux-rolling-stable
master
Linux kernel stable tree
Gitolite user
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
net
/
netfilter
Age
Commit message (
Expand
)
Author
31 hours
netfilter: handle unreadable frags
Florian Westphal
31 hours
netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
Pratham Gupta
31 hours
netfilter: ipset: fix race between dump and ip_set_list resize
Xiang Mei
2026-06-19
netfilter: require Ethernet MAC header before using eth_hdr()
Zhengchuan Liang
2026-06-19
ipvs: skip ipv6 extension headers for csum checks
Julian Anastasov
2026-06-19
netfilter: nft_fib: fix stale stack leak via the OIFNAME register
Davide Ornaghi
2026-06-19
netfilter: nft_tunnel: fix use-after-free on object destroy
Tristan Madani
2026-06-19
netfilter: ctnetlink: ensure safe access to master conntrack
Pablo Neira Ayuso
2026-06-19
netfilter: nft_exthdr: fix register tracking for F_PRESENT flag
Florian Westphal
2026-06-19
netfilter: nf_log: validate MAC header was set before dumping it
Xiang Mei
2026-06-19
netfilter: nf_conntrack: destroy stale expectfn expectations on unregister
Weiming Shi
2026-06-19
netfilter: revalidate bridge ports
Florian Westphal
2026-06-19
netfilter: nft_ct: bail out on template ct in get eval
Jiayuan Chen
2026-06-19
netfilter: conntrack_irc: fix possible out-of-bounds read
Florian Westphal
2026-06-19
netfilter: synproxy: add mutex to guard hook reference counting
Fernando Fernandez Mancera
2026-06-19
ipvs: clear the svc scheduler ptr early on edit
Julian Anastasov
2026-06-19
netfilter: xt_NFQUEUE: prefer raw_smp_processor_id
Fernando Fernandez Mancera
2026-06-09
netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without dire...
Hamza Mahfooz
2026-06-09
netfilter: xt_cpu: prefer raw_smp_processor_id
Florian Westphal
2026-06-09
netfilter: synproxy: refresh tcphdr after skb_ensure_writable
Chris Mason
2026-06-01
netfilter: nft_inner: Fix IPv6 inner_thoff desync
Yizhou Zhao
2026-06-01
netfilter: ipset: stop hash:* range iteration at end
Nan Li
2026-06-01
netfilter: nf_queue: hold bridge skb->dev while queued
Haoze Xie
2026-05-23
netfilter: nf_tables: unconditionally bump set->nelems before insertion
Pablo Neira Ayuso
2026-05-23
netfilter: nft_ct: fix missing expect put in obj eval
Li Xiasong
2026-05-23
netfilter: nf_conntrack_sip: get helper before allocating expectation
Li Xiasong
2026-05-23
netfilter: skip recording stale or retransmitted INIT
Xin Long
2026-05-23
netfilter: nf_conntrack_sip: don't use simple_strtoul
Florian Westphal
2026-05-23
netfilter: xt_policy: fix strict mode inbound policy matching
Jiexun Wang
2026-05-23
netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
Fernando Fernandez Mancera
2026-05-23
netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
Fernando Fernandez Mancera
2026-05-23
ipvs: fix MTU check for GSO packets in tunnel mode
Yingnan Zhang
2026-05-23
netfilter: xtables: restrict several matches to inet family
Pablo Neira Ayuso
2026-05-23
netfilter: conntrack: remove sprintf usage
Florian Westphal
2026-05-23
netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
Xiang Mei
2026-05-23
netfilter: nft_osf: restrict it to ipv4
Pablo Neira Ayuso
2026-05-23
netfilter: nft_fwd_netdev: check ttl/hl before forwarding
Florian Westphal
2026-05-23
netfilter: xt_socket: enable defrag after all other checks
Florian Westphal
2026-05-07
netfilter: reject zero shift in nft_bitwise
Kai Ma
2026-04-22
netfilter: conntrack: add missing netlink policy validations
Florian Westphal
2026-04-22
netfilter: nfnetlink_queue: make hash table per queue
Florian Westphal
2026-04-22
netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT a...
Scott Mitchell
2026-04-22
netfilter: xt_multiport: validate range encoding in checkentry
Ren Wei
2026-04-22
netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator
Xiang Mei
2026-04-22
ipvs: fix NULL deref in ip_vs_add_service error path
Weiming Shi
2026-04-22
netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry
Florian Westphal
2026-04-18
netfilter: nft_ct: fix use-after-free in timeout object destroy
Tuan Do
2026-04-11
netfilter: ipset: drop logically empty buckets in mtype_del
Yifan Wu
2026-04-11
netfilter: nf_tables: reject immediate NF_QUEUE verdict
Pablo Neira Ayuso
2026-04-11
netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for N...
Pablo Neira Ayuso
[next]
