summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2026-06-10netfilter: nft_exthdr: fix register tracking for F_PRESENT flagFlorian Westphal
2026-06-10netfilter: nf_log: validate MAC header was set before dumping itXiang Mei
2026-06-10netfilter: nf_conntrack: destroy stale expectfn expectations on unregisterWeiming Shi
2026-06-10netfilter: nf_tables_offload: drop device refcount on errorFlorian Westphal
2026-06-10netfilter: revalidate bridge portsFlorian Westphal
2026-06-07netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()Rosen Penev
2026-06-07netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untagDavid Carlier
2026-06-05netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptpPablo Neira Ayuso
2026-06-05netfilter: conntrack: revert ct extension genid infrastructurePablo Neira Ayuso
2026-06-05netfilter: nf_conntrack_helper: add refcounting from datapathPablo Neira Ayuso
2026-06-05netfilter: nf_conntrack_pptp: move GRE specific cleanup to GRE trackerPablo Neira Ayuso
2026-06-05netfilter: nf_conntrack_helper: dynamically allocate struct nf_conntrack_helperPablo Neira Ayuso
2026-06-05netfilter: cttimeout: detach dataplane timeout policy and repurpose refcountPablo Neira Ayuso
2026-06-05netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lockFernando Fernandez Mancera
2026-06-05netfilter: synproxy: fix unaligned memory access in timestamp adjustmentFernando Fernandez Mancera
2026-06-05netfilter: synproxy: adjust duplicate timestamp optionsFernando Fernandez Mancera
2026-06-05netfilter: synproxy: drop packets if timestamp adjustment failsFernando Fernandez Mancera
2026-06-05netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flagsPablo Neira Ayuso
2026-06-05netfilter: nfnetlink_osf: fix mss parsing on big-endian architecturesFernando Fernandez Mancera
2026-06-05ipvs: add conn_max sysctl to limit connectionsJulian Anastasov
2026-06-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2026-06-01netfilter: nft_byteorder: remove multi-register supportFlorian Westphal
2026-06-01netfilter: nft_ct: bail out on template ct in get evalJiayuan Chen
2026-06-01netfilter: nft_tunnel: fix use-after-free on object destroyTristan Madani
2026-06-01netfilter: conntrack_irc: fix possible out-of-bounds readFlorian Westphal
2026-06-01netfilter: synproxy: add mutex to guard hook reference countingFernando Fernandez Mancera
2026-06-01ipvs: clear the svc scheduler ptr early on editJulian Anastasov
2026-06-01netfilter: xt_NFQUEUE: prefer raw_smp_processor_idFernando Fernandez Mancera
2026-05-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2026-05-25netfilter: nf_conntrack_ftp: avoid u16 overflowsGiuseppe Caruso
2026-05-24netfilter: nft_set_pipapo_avx2: restore performance optimizationFlorian Westphal
2026-05-24netfilter: nf_conntrack_proto_tcp: fix typos in commentsAvinash Duduskar
2026-05-24netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB readMuhammad Bilal
2026-05-24netfilter: nfnl_cthelper: apply per-class values when updating policiesDavid Carlier
2026-05-24netfilter: nft_set_rbtree: remove dead conditionalFlorian Westphal
2026-05-24netfilter: ctnetlink: use nf_ct_exp_net() in expectation dumpPratham Gupta
2026-05-24netfilter: nf_conncount: use per-rule hash initvalFlorian Westphal
2026-05-24netfilter: allow nfnetlink built-in onlyPablo Neira Ayuso
2026-05-24netfilter: add option for GCOV profilingFlorian Westphal
2026-05-22netfilter: nf_tables: fix dst corruption in same register operationFernando Fernandez Mancera
2026-05-22netfilter: disable payload mangling in usernsFlorian Westphal
2026-05-22netfilter: xt_cpu: prefer raw_smp_processor_idFlorian Westphal
2026-05-22netfilter: nf_conntrack_gre: fix gre keymap list corruptionFlorian Westphal
2026-05-22netfilter: synproxy: refresh tcphdr after skb_ensure_writableChris Mason
2026-05-22netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without dire...Hamza Mahfooz
2026-05-16netfilter: nf_queue: hold bridge skb->dev while queuedHaoze Xie
2026-05-16netfilter: ipset: annotate "pos" for concurrent readers/writersJozsef Kadlecsik
2026-05-16netfilter: ipset: Fix data race between add and dump in all hash typesJozsef Kadlecsik
2026-05-16netfilter: ipset: Fix data race between add and list header in all hash typesJozsef Kadlecsik
2026-05-16netfilter: nft_inner: release local_lock before re-enabling softirqsFlorian Westphal