index
:
linux-stable.git
linux-2.6.11.y
linux-2.6.12.y
linux-2.6.13.y
linux-2.6.14.y
linux-2.6.15.y
linux-2.6.16.y
linux-2.6.17.y
linux-2.6.18.y
linux-2.6.19.y
linux-2.6.20.y
linux-2.6.21.y
linux-2.6.22.y
linux-2.6.23.y
linux-2.6.24.y
linux-2.6.25.y
linux-2.6.26.y
linux-2.6.27.y
linux-2.6.28.y
linux-2.6.29.y
linux-2.6.30.y
linux-2.6.31.y
linux-2.6.32.y
linux-2.6.33.y
linux-2.6.34.y
linux-2.6.35.y
linux-2.6.36.y
linux-2.6.37.y
linux-2.6.38.y
linux-2.6.39.y
linux-3.0.y
linux-3.1.y
linux-3.10.y
linux-3.11.y
linux-3.12.y
linux-3.13.y
linux-3.14.y
linux-3.15.y
linux-3.16.y
linux-3.17.y
linux-3.18.y
linux-3.19.y
linux-3.2.y
linux-3.3.y
linux-3.4.y
linux-3.5.y
linux-3.6.y
linux-3.7.y
linux-3.8.y
linux-3.9.y
linux-4.0.y
linux-4.1.y
linux-4.10.y
linux-4.11.y
linux-4.12.y
linux-4.13.y
linux-4.14.y
linux-4.15.y
linux-4.16.y
linux-4.17.y
linux-4.18.y
linux-4.19.y
linux-4.2.y
linux-4.20.y
linux-4.3.y
linux-4.4.y
linux-4.5.y
linux-4.6.y
linux-4.7.y
linux-4.8.y
linux-4.9.y
linux-5.0.y
linux-5.1.y
linux-5.10.y
linux-5.11.y
linux-5.12.y
linux-5.13.y
linux-5.14.y
linux-5.15.y
linux-5.16.y
linux-5.17.y
linux-5.18.y
linux-5.19.y
linux-5.2.y
linux-5.3.y
linux-5.4.y
linux-5.5.y
linux-5.6.y
linux-5.7.y
linux-5.8.y
linux-5.9.y
linux-6.0.y
linux-6.1.y
linux-6.10.y
linux-6.11.y
linux-6.12.y
linux-6.13.y
linux-6.14.y
linux-6.15.y
linux-6.16.y
linux-6.17.y
linux-6.18.y
linux-6.19.y
linux-6.2.y
linux-6.3.y
linux-6.4.y
linux-6.5.y
linux-6.6.y
linux-6.7.y
linux-6.8.y
linux-6.9.y
linux-7.0.y
linux-7.1.y
linux-rolling-lts
linux-rolling-stable
master
Linux kernel stable tree
Gitolite user
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
net
/
netfilter
Age
Commit message (
Expand
)
Author
8 days
audit: add audit_log_nf_skb helper function
Ricardo Robaina
8 days
ipvs: reload ip header after head reallocation
Florian Westphal
8 days
ipvs: fix more places with wrong ipv6 transport offsets
Julian Anastasov
8 days
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
Yizhou Zhao
8 days
ipvs: use parsed transport offset in SCTP state lookup
Yizhou Zhao
8 days
netfilter: xt_nat: reject unsupported target families
Wyatt Feng
8 days
netfilter: ecache: fix inverted time_after() check
Yizhou Zhao
8 days
netfilter: nf_conncount: fix zone comparison in tuple dedup
Yizhou Zhao
8 days
netfilter: nf_nat_sip: reload possible stale data pointer
Florian Westphal
8 days
netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst
Haoze Xie
8 days
netfilter: xt_cluster: reject template conntracks in hash match
Wyatt Feng
8 days
netfilter: nfnl_cthelper: apply per-class values when updating policies
David Carlier
8 days
netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
Muhammad Bilal
8 days
ipvs: ensure inner headers in ICMP errors are in headroom
Julian Anastasov
8 days
ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
Yizhou Zhao
8 days
ipvs: use parsed transport offset in TCP state lookup
Yizhou Zhao
8 days
ipvs: pass parsed transport offset to state handlers
Yizhou Zhao
8 days
netfilter: xt_connmark: reject invalid shift parameters
Wyatt Feng
8 days
netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
Feng Wu
8 days
netfilter: xt_u32: reject invalid shift counts
Wyatt Feng
8 days
netfilter: nft_compat: ebtables emulation must reject non-bridge targets
Florian Westphal
8 days
netfilter: nft_synproxy: stop bypassing the priv->info snapshot
Runyu Xiao
8 days
netfilter: nf_conncount: prevent connlimit drops for early confirmed ct
Fernando Fernandez Mancera
8 days
netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()
Mathias Krause
8 days
netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
Jozsef Kadlecsik
8 days
netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
Jozsef Kadlecsik
8 days
netfilter: ipset: annotate "pos" for concurrent readers/writers
Jozsef Kadlecsik
8 days
netfilter: ipset: Fix data race between add and dump in all hash types
Jozsef Kadlecsik
8 days
netfilter: nf_conncount: callers must hold rcu read lock
Florian Westphal
8 days
netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp
Pablo Neira Ayuso
8 days
netfilter: conntrack: revert ct extension genid infrastructure
Pablo Neira Ayuso
8 days
netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock
Fernando Fernandez Mancera
8 days
netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures
Fernando Fernandez Mancera
8 days
netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
Pratham Gupta
8 days
netfilter: ipset: fix race between dump and ip_set_list resize
Xiang Mei
2026-07-04
netfilter: nf_tables: always walk all pending catchall elements
Florian Westphal
2026-06-19
netfilter: require Ethernet MAC header before using eth_hdr()
Zhengchuan Liang
2026-06-19
ipvs: skip ipv6 extension headers for csum checks
Julian Anastasov
2026-06-19
netfilter: nft_fib: fix stale stack leak via the OIFNAME register
Davide Ornaghi
2026-06-19
netfilter: nft_tunnel: fix use-after-free on object destroy
Tristan Madani
2026-06-19
netfilter: ctnetlink: ensure safe access to master conntrack
Pablo Neira Ayuso
2026-06-19
netfilter: nft_exthdr: fix register tracking for F_PRESENT flag
Florian Westphal
2026-06-19
netfilter: nf_log: validate MAC header was set before dumping it
Xiang Mei
2026-06-19
netfilter: nf_conntrack: destroy stale expectfn expectations on unregister
Weiming Shi
2026-06-19
netfilter: nft_ct: bail out on template ct in get eval
Jiayuan Chen
2026-06-19
netfilter: conntrack_irc: fix possible out-of-bounds read
Florian Westphal
2026-06-19
netfilter: synproxy: add mutex to guard hook reference counting
Fernando Fernandez Mancera
2026-06-19
ipvs: clear the svc scheduler ptr early on edit
Julian Anastasov
2026-06-19
netfilter: xt_NFQUEUE: prefer raw_smp_processor_id
Fernando Fernandez Mancera
2026-06-19
netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without dire...
Hamza Mahfooz
[next]
