aboutsummaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
4 daysMerge tag 'net-7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netd...Linus Torvalds11-20/+531
7 daysnetfilter: nftables: restrict checkum update offsetFlorian Westphal1-0/+100
7 daysnetfilter: nftables: restrict linklayer and network header writesFlorian Westphal1-0/+170
7 daysnetfilter: nfnetlink_queue: restrict writes to network headerFlorian Westphal1-0/+170
7 daysnetfilter: nft_fib: reject fib expression on the netdev egress hookTheodor Arsenij Larionov-Trichkine2-1/+37
7 daysnetfilter: nfnetlink_cthelper: cap to maximum number of expectation per masterPablo Neira Ayuso1-0/+2
7 daysnetfilter: nf_conntrack_sip: validate skb_dst() before accessing itPablo Neira Ayuso1-2/+5
7 daysnetfilter: ipset: fix race between dump and ip_set_list resizeXiang Mei1-1/+7
7 daysnetfilter: nft_set_pipapo: don't leak bad clone into future transactionFlorian Westphal2-5/+37
7 daysnetfilter: nf_conntrack_expect: zero at allocation timeFlorian Westphal2-11/+3
11 daysMerge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpfLinus Torvalds1-22/+13
13 daysnetfilter: nf_conntrack_helper: cap maximum number of expectation at helper r...Pablo Neira Ayuso2-4/+8
13 daysnetfilter: nft_ct: expectation timeouts are passed in millisecondsFlorian Westphal1-3/+18
13 daysnetfilter: nf_conntrack_expect: run expectation eviction with no helperPablo Neira Ayuso1-0/+7
13 daysnetfilter: nf_conntrack_expect: store master_tuple in expectationPablo Neira Ayuso3-6/+7
13 daysnetfilter: conntrack: add deprecation warnings for irc and pptp trackersFlorian Westphal3-5/+10
14 daysnetfilter: ctnetlink: do not allow to reset helper on existing conntrackPablo Neira Ayuso1-13/+0
14 daysnetfilter: nft_compat: ebtables emulation must reject non-bridge targetsFlorian Westphal1-3/+21
14 daysnetfilter: nft_synproxy: stop bypassing the priv->info snapshotRunyu Xiao1-5/+4
14 daysnetfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto()Lorenzo Bianconi1-3/+5
14 daysnetfilter: nf_conncount: prevent connlimit drops for early confirmed ctFernando Fernandez Mancera1-6/+5
14 daysnetfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()Mathias Krause1-0/+10
14 daysbpf: Guard conntrack opts error writesYiyang Chen1-22/+13
2026-06-21netfilter: nf_conntrack_expect: use conntrack GC to reap expectationsPablo Neira Ayuso7-105/+125
2026-06-21netfilter: nft_flow_offload: zero device address for non-ether caseFlorian Westphal1-1/+3
2026-06-21netfilter: nft_meta_bridge: add validate callback for get operationsFlorian Westphal1-2/+3
2026-06-21netfilter: nft_payload: reject offsets exceeding 65535 bytesFlorian Westphal1-3/+13
2026-06-21netfilter: ipset: make sure gc is properly stoppedJozsef Kadlecsik1-1/+1
2026-06-21netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()Jozsef Kadlecsik1-2/+2
2026-06-21netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap typesJozsef Kadlecsik4-4/+6
2026-06-21netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash typesJozsef Kadlecsik1-5/+5
2026-06-19netfilter: flowtable: fix and simplify IP6IP6 tunnel handlingLorenzo Bianconi1-61/+19
2026-06-19netfilter: xt_cluster: reject template conntracks in hash matchWyatt Feng1-1/+1
2026-06-19netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dstHaoze Xie2-0/+17
2026-06-19netfilter: flowtable: fix offloaded ct timeout never being extendedAdrian Bente1-4/+9
2026-06-17Merge tag 'net-next-7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds63-746/+1016
2026-06-15Merge tag 'nf-next-26-06-14' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski39-212/+424
2026-06-15Merge tag 'timers-core-2026-06-13' of gitolite.kernel.org:pub/scm/linux/kerne...Linus Torvalds1-6/+18
2026-06-14netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use themPablo Neira Ayuso2-14/+18
2026-06-14netfilter: flowtable: bail out if forward path cannot be discoveredPablo Neira Ayuso1-35/+46
2026-06-14netfilter: conntrack: check NULL when retrieving ct extensionPablo Neira Ayuso11-23/+134
2026-06-14netfilter: nf_conncount: gc and rcu fixesFlorian Westphal1-22/+32
2026-06-14netfilter: nf_conncount: add sequence counter to detect tree modificationsFlorian Westphal1-0/+19
2026-06-14netfilter: nf_conncount: split count_tree_node rbtree walk into helperFlorian Westphal1-40/+62
2026-06-14netfilter: nf_conncount: use per nf_conncount_data spinlocksFlorian Westphal1-29/+34
2026-06-14netfilter: nf_conncount: callers must hold rcu read lockFlorian Westphal1-3/+3
2026-06-14netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control pathsFernando Fernandez Mancera22-46/+76
2026-06-14ipvs: Replace use of system_unbound_wq with system_dfl_long_wqMarco Crivellari2-7/+7
2026-06-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski9-16/+112
2026-06-10netfilter: nft_fib: fix stale stack leak via the OIFNAME registerDavide Ornaghi1-0/+6
generated by cgit