summaryrefslogtreecommitdiff
path: root/net
AgeCommit message (Expand)Author
15 hoursnet: gro: properly validate BIG TCP aggregation criteriaEric Dumazet
15 hoursBluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255Ali Ahmet Memis
15 hoursBluetooth: ISO: zero the sockaddr before returning it in getnameAli Ahmet Memis
15 hoursBluetooth: ISO: do not force BT_LISTEN after a failed BIG syncAli Ahmet Memis
15 hoursBluetooth: hci_sync: Fix accept list UAF during suspendChengfeng Ye
15 hoursBluetooth: hci_event: validate LE Set CIG Parameters responseLaxman Acharya Padhya
15 hoursBluetooth: hci_event: fix LE list UAF on resetChengfeng Ye
15 hoursxfrm: fix sk_dst_cache double-free in xfrm_user_policy()Xiang Mei (Microsoft)
15 hoursmptcp: pm: fix memory leak from alloc-during-teardown raceShardul Bankar
15 hoursmptcp: pm: uniform announced addresses helpersMatthieu Baerts (NGI0)
15 hoursmptcp: pm: rename add_entry structure to add_addrMatthieu Baerts (NGI0)
15 hoursmptcp: pm: use for_each_subflow helperMatthieu Baerts (NGI0)
15 hoursipv6: fix use-after-free in ip6_finish_output2()Luxiao Xu
15 hoursipv4: reject undersized MTUs in ip_do_fragment()Yong Wang
15 hoursnfc: nci: free destination parameters when closing a connectionLinmao Li
15 hoursnfc: nci: fix uninit-value in the RF discover/activated NTF handlersSamuel Page
15 hoursnfc: nci: fix out-of-bounds write in nci_target_auto_activated()Samuel Page
15 hoursnfc: nci: add data_len bound checks to activation parameter extractorsBryam Vargas
15 hoursnfc: llcp: reject PDUs shorter than the LLCP headerDoruk Tan Ozturk
15 hoursnfc: llcp: fix OOB read and u8 offset wrap in TLV parsersMuhammad Bilal
15 hoursnfc: llcp: bound the connect_sn TLV walk to the skbDoruk Tan Ozturk
15 hoursnfc: digital: clamp SENSF_RES length to the destination bufferDoruk Tan Ozturk
15 hourslibceph: fix OOB read in decode_watchers() via missing bounds checkPavitra Jha
15 hoursBluetooth: RFCOMM: take rfcomm_mutex for the deferred setup acceptAli Ahmet Memis
5 daysnet/sched: cls_bpf: reject dev-bound programs bound to a different deviceJamal Hadi Salim
5 daysnet/sched: cls_u32: skip hash tables in u32_bind_class()Zhang Changzhong
5 daysnet/sched: act_api: fix TOCTOU NULL deref on a->goto_chainJamal Hadi Salim
5 daysaf_packet: Don't send zero-byte data in tpacket_snd().Eric Dumazet
5 daysnet/tls: Fail tls_sw_splice_read() after a failed async decryptChuck Lever
5 daysnet: packet: fix wrong transport_header when sending VLAN-tagged frameWei Fang
5 daystcp: fix icsk_ack.ato bitfield overflowJiayuan Chen
5 daysnetfilter: ipset: let destroy callbacks adjust ext mem sizeFlorian Westphal
5 daysnetfilter: ipset: fix list type element drift bugFlorian Westphal
5 daysnetfilter: flowtable: publish GC-visible tuple lastJérémy Jean
5 daysnetfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort pathAlexey Velichayshiy
5 daysnetfilter: ipset: fix refcount race between list:set GC and swapXiang Mei (Microsoft)
5 daysnet/sched: serialize qdisc_rtab_list against concurrent get/putAldo Ariel Panzardo
5 dayslibceph: fix two unsafe bare decodes in decode_lockers()Pavitra Jha
5 dayslibceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZEXiang Mei
5 dayslibceph: Amend checking to fix `make W=1` build breakageAndy Shevchenko
5 dayslibceph: tolerate addrvecs with multiple entries of the same typeKefu Chai
5 dayslibceph: Avoid using invalid osd indices from primary_tempRaphael Zimmer
5 dayslibceph: fix multiple unsafe decodes in decode_locker()Pavitra Jha
5 daysmptcp: fastopen: only mark MPTFO subflows with SYN dataWyatt Feng
5 daysmptcp: pm: fix data race in add_addr timer callbackQing Luo
5 daysmptcp: options: reset DSS fields in case of unexpected sizeMatthieu Baerts (NGI0)
5 daysmptcp: avoid combining some incoming suboptionsMatthieu Baerts (NGI0)
5 daysmptcp: reclaim forward-allocated memory on RX path errorsPaolo Abeni
5 daysipvs: separate destination availability stateYizhou Zhao
8 daysnetfilter: flowtable: ensure sufficient headroom in xmit pathPablo Neira Ayuso