summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
6 daysipvs: ensure inner headers in ICMP errors are in headroomJulian Anastasov
6 daysipvs: use parsed transport offset in SCTP state lookupYizhou Zhao
6 daysipvs: use parsed transport offset in TCP state lookupYizhou Zhao
6 daysipvs: pass parsed transport offset to state handlersYizhou Zhao
6 daysnetfilter: handle unreadable fragsFlorian Westphal
6 daysnetfilter: flowtable: support IPIP tunnel with direct xmitPablo Neira Ayuso
6 daysnetfilter: flowtable: IPIP tunnel hardware offload is not yet supportPablo Neira Ayuso
6 daysnetfilter: flowtable: use dst in this direction when pushing IPIP headerPablo Neira Ayuso
6 daysnetfilter: ipset: allocate the proper memory for the generic hash structureJozsef Kadlecsik
6 daysnetfilter: ipset: cleanup the add/del backlog when resize failedJozsef Kadlecsik
6 daysnetfilter: ipset: exclude gc when resize is in progressJozsef Kadlecsik
6 daysnetfilter: ipset: mark the rcu locked areas properlyJozsef Kadlecsik
6 daysnetfilter: nft_lookup: fix catchall element handling with inverted lookupsTamaki Yanagawa
11 daysnetfilter: xt_connmark: reject invalid shift parametersWyatt Feng
11 daysipvs: reset full ip_vs_seq structs in ip_vs_conn_newYizhou Zhao
11 daysipvs: fix PMTU for GUE/GRE tunnel ICMP errorsYizhou Zhao
11 daysnetfilter: nft_set_rbtree: get command skips end element with open intervalPablo Neira Ayuso
11 daysnetfilter: nfnetlink_cthelper: cap to maximum number of expectation per maste...Pablo Neira Ayuso
11 daysnetfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()Feng Wu
11 daysnetfilter: xt_u32: reject invalid shift countsWyatt Feng
11 daysnetfilter: nf_nat_sip: reload possible stale data pointerFlorian Westphal
12 daysMerge tag 'net-7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netd...Linus Torvalds
2026-06-30netfilter: nftables: restrict checkum update offsetFlorian Westphal
2026-06-30netfilter: nftables: restrict linklayer and network header writesFlorian Westphal
2026-06-30netfilter: nfnetlink_queue: restrict writes to network headerFlorian Westphal
2026-06-30netfilter: nft_fib: reject fib expression on the netdev egress hookTheodor Arsenij Larionov-Trichkine
2026-06-30netfilter: nfnetlink_cthelper: cap to maximum number of expectation per masterPablo Neira Ayuso
2026-06-30netfilter: nf_conntrack_sip: validate skb_dst() before accessing itPablo Neira Ayuso
2026-06-30netfilter: ipset: fix race between dump and ip_set_list resizeXiang Mei
2026-06-30netfilter: nft_set_pipapo: don't leak bad clone into future transactionFlorian Westphal
2026-06-30netfilter: nf_conntrack_expect: zero at allocation timeFlorian Westphal
2026-06-25Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpfLinus Torvalds
2026-06-23netfilter: nf_conntrack_helper: cap maximum number of expectation at helper r...Pablo Neira Ayuso
2026-06-23netfilter: nft_ct: expectation timeouts are passed in millisecondsFlorian Westphal
2026-06-23netfilter: nf_conntrack_expect: run expectation eviction with no helperPablo Neira Ayuso
2026-06-23netfilter: nf_conntrack_expect: store master_tuple in expectationPablo Neira Ayuso
2026-06-23netfilter: conntrack: add deprecation warnings for irc and pptp trackersFlorian Westphal
2026-06-23netfilter: ctnetlink: do not allow to reset helper on existing conntrackPablo Neira Ayuso
2026-06-23netfilter: nft_compat: ebtables emulation must reject non-bridge targetsFlorian Westphal
2026-06-23netfilter: nft_synproxy: stop bypassing the priv->info snapshotRunyu Xiao
2026-06-23netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto()Lorenzo Bianconi
2026-06-23netfilter: nf_conncount: prevent connlimit drops for early confirmed ctFernando Fernandez Mancera
2026-06-23netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()Mathias Krause
2026-06-22bpf: Guard conntrack opts error writesYiyang Chen
2026-06-21netfilter: nf_conntrack_expect: use conntrack GC to reap expectationsPablo Neira Ayuso
2026-06-21netfilter: nft_flow_offload: zero device address for non-ether caseFlorian Westphal
2026-06-21netfilter: nft_meta_bridge: add validate callback for get operationsFlorian Westphal
2026-06-21netfilter: nft_payload: reject offsets exceeding 65535 bytesFlorian Westphal
2026-06-21netfilter: ipset: make sure gc is properly stoppedJozsef Kadlecsik
2026-06-21netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()Jozsef Kadlecsik