index
:
linux-stable.git
linux-2.6.11.y
linux-2.6.12.y
linux-2.6.13.y
linux-2.6.14.y
linux-2.6.15.y
linux-2.6.16.y
linux-2.6.17.y
linux-2.6.18.y
linux-2.6.19.y
linux-2.6.20.y
linux-2.6.21.y
linux-2.6.22.y
linux-2.6.23.y
linux-2.6.24.y
linux-2.6.25.y
linux-2.6.26.y
linux-2.6.27.y
linux-2.6.28.y
linux-2.6.29.y
linux-2.6.30.y
linux-2.6.31.y
linux-2.6.32.y
linux-2.6.33.y
linux-2.6.34.y
linux-2.6.35.y
linux-2.6.36.y
linux-2.6.37.y
linux-2.6.38.y
linux-2.6.39.y
linux-3.0.y
linux-3.1.y
linux-3.10.y
linux-3.11.y
linux-3.12.y
linux-3.13.y
linux-3.14.y
linux-3.15.y
linux-3.16.y
linux-3.17.y
linux-3.18.y
linux-3.19.y
linux-3.2.y
linux-3.3.y
linux-3.4.y
linux-3.5.y
linux-3.6.y
linux-3.7.y
linux-3.8.y
linux-3.9.y
linux-4.0.y
linux-4.1.y
linux-4.10.y
linux-4.11.y
linux-4.12.y
linux-4.13.y
linux-4.14.y
linux-4.15.y
linux-4.16.y
linux-4.17.y
linux-4.18.y
linux-4.19.y
linux-4.2.y
linux-4.20.y
linux-4.3.y
linux-4.4.y
linux-4.5.y
linux-4.6.y
linux-4.7.y
linux-4.8.y
linux-4.9.y
linux-5.0.y
linux-5.1.y
linux-5.10.y
linux-5.11.y
linux-5.12.y
linux-5.13.y
linux-5.14.y
linux-5.15.y
linux-5.16.y
linux-5.17.y
linux-5.18.y
linux-5.19.y
linux-5.2.y
linux-5.3.y
linux-5.4.y
linux-5.5.y
linux-5.6.y
linux-5.7.y
linux-5.8.y
linux-5.9.y
linux-6.0.y
linux-6.1.y
linux-6.10.y
linux-6.11.y
linux-6.12.y
linux-6.13.y
linux-6.14.y
linux-6.15.y
linux-6.16.y
linux-6.17.y
linux-6.18.y
linux-6.19.y
linux-6.2.y
linux-6.3.y
linux-6.4.y
linux-6.5.y
linux-6.6.y
linux-6.7.y
linux-6.8.y
linux-6.9.y
linux-7.0.y
linux-7.1.y
linux-rolling-lts
linux-rolling-stable
master
Linux kernel stable tree
Gitolite user
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
net
/
netfilter
Age
Commit message (
Expand
)
Author
9 days
ipvs: reload ip header after head reallocation
Florian Westphal
9 days
ipvs: fix more places with wrong ipv6 transport offsets
Julian Anastasov
9 days
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
Yizhou Zhao
9 days
ipvs: use parsed transport offset in SCTP state lookup
Yizhou Zhao
9 days
netfilter: xt_nat: reject unsupported target families
Wyatt Feng
9 days
netfilter: ecache: fix inverted time_after() check
Yizhou Zhao
9 days
netfilter: nf_conncount: fix zone comparison in tuple dedup
Yizhou Zhao
9 days
netfilter: nf_nat_sip: reload possible stale data pointer
Florian Westphal
9 days
netfilter: nft_set_pipapo: don't leak bad clone into future transaction
Florian Westphal
9 days
netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst
Haoze Xie
9 days
netfilter: xt_cluster: reject template conntracks in hash match
Wyatt Feng
9 days
netfilter: nfnl_cthelper: apply per-class values when updating policies
David Carlier
9 days
netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
Muhammad Bilal
9 days
ipvs: ensure inner headers in ICMP errors are in headroom
Julian Anastasov
9 days
ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
Yizhou Zhao
9 days
ipvs: use parsed transport offset in TCP state lookup
Yizhou Zhao
9 days
ipvs: pass parsed transport offset to state handlers
Yizhou Zhao
9 days
netfilter: nft_lookup: fix catchall element handling with inverted lookups
Tamaki Yanagawa
9 days
netfilter: xt_connmark: reject invalid shift parameters
Wyatt Feng
9 days
netfilter: nft_set_rbtree: get command skips end element with open interval
Pablo Neira Ayuso
9 days
netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
Feng Wu
9 days
netfilter: xt_u32: reject invalid shift counts
Wyatt Feng
9 days
netfilter: nft_compat: ebtables emulation must reject non-bridge targets
Florian Westphal
9 days
netfilter: nft_synproxy: stop bypassing the priv->info snapshot
Runyu Xiao
9 days
netfilter: nf_conncount: prevent connlimit drops for early confirmed ct
Fernando Fernandez Mancera
9 days
netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()
Mathias Krause
9 days
netfilter: nft_flow_offload: zero device address for non-ether case
Florian Westphal
9 days
netfilter: flowtable: move path discovery infrastructure to its own file
Pablo Neira Ayuso
9 days
netfilter: nft_meta_bridge: add validate callback for get operations
Florian Westphal
9 days
netfilter: nft_payload: reject offsets exceeding 65535 bytes
Florian Westphal
9 days
netfilter: ipset: make sure gc is properly stopped
Jozsef Kadlecsik
9 days
netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
Jozsef Kadlecsik
9 days
netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
Jozsef Kadlecsik
9 days
netfilter: ipset: annotate "pos" for concurrent readers/writers
Jozsef Kadlecsik
9 days
netfilter: ipset: Fix data race between add and dump in all hash types
Jozsef Kadlecsik
9 days
netfilter: nf_conncount: callers must hold rcu read lock
Florian Westphal
9 days
netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp
Pablo Neira Ayuso
9 days
netfilter: conntrack: revert ct extension genid infrastructure
Pablo Neira Ayuso
9 days
netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock
Fernando Fernandez Mancera
9 days
netfilter: synproxy: fix unaligned memory access in timestamp adjustment
Fernando Fernandez Mancera
9 days
netfilter: synproxy: adjust duplicate timestamp options
Fernando Fernandez Mancera
9 days
netfilter: synproxy: drop packets if timestamp adjustment fails
Fernando Fernandez Mancera
9 days
netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flags
Pablo Neira Ayuso
9 days
netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures
Fernando Fernandez Mancera
2026-07-18
netfilter: flowtable: fix offloaded ct timeout never being extended
Adrian Bente
2026-07-18
netfilter: handle unreadable frags
Florian Westphal
2026-07-18
netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
Pratham Gupta
2026-07-18
netfilter: ipset: fix race between dump and ip_set_list resize
Xiang Mei
2026-06-19
netfilter: require Ethernet MAC header before using eth_hdr()
Zhengchuan Liang
2026-06-19
ipvs: skip ipv6 extension headers for csum checks
Julian Anastasov
[next]
