aboutsummaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2026-06-05netfilter: nf_conntrack_pptp: move GRE specific cleanup to GRE trackerPablo Neira Ayuso2-61/+63
2026-06-05netfilter: nf_conntrack_helper: dynamically allocate struct nf_conntrack_helperPablo Neira Ayuso12-171/+185
2026-06-05netfilter: cttimeout: detach dataplane timeout policy and repurpose refcountPablo Neira Ayuso5-72/+82
2026-06-05netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lockFernando Fernandez Mancera1-0/+2
2026-06-05netfilter: synproxy: fix unaligned memory access in timestamp adjustmentFernando Fernandez Mancera1-10/+9
2026-06-05netfilter: synproxy: adjust duplicate timestamp optionsFernando Fernandez Mancera1-1/+0
2026-06-05netfilter: synproxy: drop packets if timestamp adjustment failsFernando Fernandez Mancera1-9/+13
2026-06-05netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flagsPablo Neira Ayuso2-8/+16
2026-06-05netfilter: nfnetlink_osf: fix mss parsing on big-endian architecturesFernando Fernandez Mancera1-5/+1
2026-06-05ipvs: add conn_max sysctl to limit connectionsJulian Anastasov2-1/+62
2026-06-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski9-59/+61
2026-06-01netfilter: nft_byteorder: remove multi-register supportFlorian Westphal1-31/+20
2026-06-01netfilter: nft_ct: bail out on template ct in get evalJiayuan Chen2-6/+4
2026-06-01netfilter: nft_tunnel: fix use-after-free on object destroyTristan Madani1-1/+1
2026-06-01netfilter: conntrack_irc: fix possible out-of-bounds readFlorian Westphal1-2/+2
2026-06-01netfilter: synproxy: add mutex to guard hook reference countingFernando Fernandez Mancera1-6/+18
2026-06-01ipvs: clear the svc scheduler ptr early on editJulian Anastasov2-12/+15
2026-06-01netfilter: xt_NFQUEUE: prefer raw_smp_processor_idFernando Fernandez Mancera1-1/+1
2026-05-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski10-42/+127
2026-05-25netfilter: nf_conntrack_ftp: avoid u16 overflowsGiuseppe Caruso1-4/+7
2026-05-24netfilter: nft_set_pipapo_avx2: restore performance optimizationFlorian Westphal1-21/+14
2026-05-24netfilter: nf_conntrack_proto_tcp: fix typos in commentsAvinash Duduskar1-4/+4
2026-05-24netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB readMuhammad Bilal1-3/+3
2026-05-24netfilter: nfnl_cthelper: apply per-class values when updating policiesDavid Carlier1-2/+2
2026-05-24netfilter: nft_set_rbtree: remove dead conditionalFlorian Westphal1-3/+0
2026-05-24netfilter: ctnetlink: use nf_ct_exp_net() in expectation dumpPratham Gupta1-1/+1
2026-05-24netfilter: nf_conncount: use per-rule hash initvalFlorian Westphal1-4/+3
2026-05-24netfilter: allow nfnetlink built-in onlyPablo Neira Ayuso2-2/+2
2026-05-24netfilter: add option for GCOV profilingFlorian Westphal6-0/+36
2026-05-22netfilter: nf_tables: fix dst corruption in same register operationFernando Fernandez Mancera2-7/+24
2026-05-22netfilter: disable payload mangling in usernsFlorian Westphal2-2/+7
2026-05-22netfilter: xt_cpu: prefer raw_smp_processor_idFlorian Westphal1-1/+1
2026-05-22netfilter: nf_conntrack_gre: fix gre keymap list corruptionFlorian Westphal3-31/+91
2026-05-22netfilter: synproxy: refresh tcphdr after skb_ensure_writableChris Mason1-0/+2
2026-05-22netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without dire...Hamza Mahfooz1-1/+2
2026-05-16netfilter: nf_queue: hold bridge skb->dev while queuedHaoze Xie2-1/+5
2026-05-16netfilter: ipset: annotate "pos" for concurrent readers/writersJozsef Kadlecsik1-24/+38
2026-05-16netfilter: ipset: Fix data race between add and dump in all hash typesJozsef Kadlecsik1-2/+5
2026-05-16netfilter: ipset: Fix data race between add and list header in all hash typesJozsef Kadlecsik1-2/+2
2026-05-16netfilter: nft_inner: release local_lock before re-enabling softirqsFlorian Westphal1-1/+1
2026-05-16netfilter: ipset: stop hash:* range iteration at endNan Li4-4/+17
2026-05-16netfilter: nft_inner: Fix IPv6 inner_thoff desyncYizhou Zhao1-1/+0
2026-05-16netfilter: ipset: fix a potential dump-destroy raceJozsef Kadlecsik1-0/+1
2026-05-16ipvs: avoid possible loop in ip_vs_dst_event on resizingJulian Anastasov1-65/+122
2026-05-16netfilter: nf_conntrack_helper: fix possible null deref during error logFlorian Westphal1-5/+8
2026-05-08netfilter: nft_ct: fix missing expect put in obj evalLi Xiasong1-0/+2
2026-05-08netfilter: nf_conntrack_sip: get helper before allocating expectationLi Xiasong1-4/+4
2026-05-08netfilter: ctnetlink: check tuple and mask in expectations created via nfqueuePablo Neira Ayuso1-0/+3
2026-05-08netfilter: nf_conntrack_expect: restore helper propagation via expectationPablo Neira Ayuso7-11/+35
2026-05-08netfilter: x_tables: add and use xtables_unregister_table_exitFlorian Westphal1-19/+62
generated by cgit