aboutsummaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2026-08-13Merge tag 'net-7.2-rc8' of git://git.kernel.org/pub/scm/linux/kernel/git/netd...Linus Torvalds21-141/+246
2026-08-10netfilter: ipset: let destroy callbacks adjust ext mem sizeFlorian Westphal2-3/+2
2026-08-10netfilter: ipset: fix list type element drift bugFlorian Westphal1-2/+5
2026-08-10netfilter: flowtable: publish GC-visible tuple lastJérémy Jean1-3/+4
2026-08-10netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort pathAlexey Velichayshiy1-1/+1
2026-08-10ipvs: revalidate ihl to prevent out-of-bounds accessJulian Anastasov2-3/+11
2026-08-10ipvs: clear IPv4 options after rebasing tunnel ICMP errorsKyle Zeng1-0/+1
2026-08-10netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet stateFlorian Westphal2-6/+11
2026-08-10netfilter: nf_conntrack: defer invalid log until after unlockZihan Xi3-48/+102
2026-08-10ipvs: separate destination availability stateYizhou Zhao7-16/+16
2026-08-10ipvs: properly update the overload flag on dest editJulian Anastasov2-25/+69
2026-08-10ipvs: add totalconns for destJulian Anastasov6-33/+16
2026-08-10netfilter: ipset: fix refcount race between list:set GC and swapXiang Mei (Microsoft)1-6/+13
2026-08-07Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpfLinus Torvalds1-24/+48
2026-08-05netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()Eric Dumazet1-0/+3
2026-08-01bpf: Fix netns reference imbalance in conntrack kfuncsChengfeng Ye1-24/+48
2026-07-31ipvs: return the csum validation for forward hookJulian Anastasov1-1/+1
2026-07-31ipvs: avoid out-of-bounds write in ip_vs_nat_icmpJulian Anastasov2-34/+35
2026-07-31netfilter: ipset: switch to rcu workFlorian Westphal1-17/+29
2026-07-31netfilter: ipset: add and use mtype_del_cidr_all helperFlorian Westphal1-18/+16
2026-07-31netfilter: ipset: add small wrappers for hash and bucket sizesFlorian Westphal1-8/+31
2026-07-31netfilter: ipset: switch ext_size to atomic64_tJozsef Kadlecsik4-8/+8
2026-07-31netfilter: ipset: rework cidr bookkeepingJozsef Kadlecsik7-93/+182
2026-07-31ipvs: stop estimator after disabled calc phaseZhiling Zou1-3/+7
2026-07-23netfilter: nft_payload: fix mask build for partial field offloadXiang Mei (Microsoft)1-11/+1
2026-07-23ipvs: clear the nfct flag under lockJulian Anastasov1-2/+8
2026-07-23ipvs: do not mangle ICMP replies for non-first fragmentsJulian Anastasov2-46/+43
2026-07-23ipvs: fix places with wrong packet offsetsJulian Anastasov6-87/+88
2026-07-23ipvs: fix the checksum validationsJulian Anastasov4-84/+45
2026-07-23netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCHPablo Neira Ayuso1-1/+15
2026-07-23netfilter: nf_tables: make nft_object rhltable per tablePablo Neira Ayuso1-18/+16
2026-07-23ipvs: adjust double hashing when fwd method changesJulian Anastasov1-42/+147
2026-07-23ipvs: do not propagate one-packet flag to synced connsZhiling Zou1-0/+3
2026-07-23netfilter: ipset: do not update comments from kernel-side hash addsDavid Lee1-1/+1
2026-07-22netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair()Pablo Neira Ayuso2-15/+40
2026-07-22netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()Xiang Mei2-2/+2
2026-07-10netfilter: xt_physdev: masks are not c-stringsFlorian Westphal1-5/+0
2026-07-10ipvs: fix more places with wrong ipv6 transport offsetsJulian Anastasov2-8/+5
2026-07-10ipvs: reload ip header after head reallocationFlorian Westphal1-4/+2
2026-07-10netfilter: flowtable: use correct direction to set up tunnel routePablo Neira Ayuso1-3/+3
2026-07-10netfilter: nf_conncount: fix zone comparison in tuple dedupYizhou Zhao1-3/+3
2026-07-10netfilter: ecache: fix inverted time_after() checkYizhou Zhao1-1/+1
2026-07-10netfilter: xt_nat: reject unsupported target familiesWyatt Feng1-0/+9
2026-07-08ipvs: ensure inner headers in ICMP errors are in headroomJulian Anastasov1-6/+15
2026-07-08ipvs: use parsed transport offset in SCTP state lookupYizhou Zhao1-10/+5
2026-07-08ipvs: use parsed transport offset in TCP state lookupYizhou Zhao1-7/+1
2026-07-08ipvs: pass parsed transport offset to state handlersYizhou Zhao4-8/+11
2026-07-08netfilter: handle unreadable fragsFlorian Westphal3-18/+40
2026-07-08netfilter: flowtable: support IPIP tunnel with direct xmitPablo Neira Ayuso2-6/+9
2026-07-08netfilter: flowtable: IPIP tunnel hardware offload is not yet supportPablo Neira Ayuso2-6/+23
generated by cgit