summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2026-03-04netfilter: nf_conntrack_h323: fix OOB read in decode_choice()Vahagn Vardanian
2026-03-04netfilter: xt_tcpmss: check remaining length before reading optlenFlorian Westphal
2026-03-04netfilter: nf_conntrack: Add allow_clash to generic protocol handlerYuto Hamaguchi
2026-03-04netfilter: nf_conntrack_h323: don't pass uninitialised l3num valueFlorian Westphal
2026-03-04netfilter: nft_set_rbtree: check for partial overlaps in anonymous setsPablo Neira Ayuso
2026-03-04netfilter: nft_set_hash: fix get operation on big endianFlorian Westphal
2026-03-04netfilter: nf_conncount: fix tracking of connections from localhostFernando Fernandez Mancera
2026-03-04netfilter: nf_conncount: increase the connection clean up limit to 64Fernando Fernandez Mancera
2026-03-04netfilter: nf_conncount: make nf_conncount_gc_list() to disable BHFernando Fernandez Mancera
2026-02-11netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()Andrew Fasano
2026-02-11netfilter: replace -EEXIST with -EBUSYDaniel Gomez
2026-02-11netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAXPablo Neira Ayuso
2026-01-19netfilter: nf_conncount: update last_gc only when GC has been performedFernando Fernandez Mancera
2026-01-19netfilter: nf_tables: fix memory leak in nf_tables_newrule()Zilin Guan
2026-01-19netfilter: nft_synproxy: avoid possible data-race on update operationFernando Fernandez Mancera
2026-01-19ipvs: fix ipv4 null-ptr-deref in route error pathSlavin Liu
2026-01-19netfilter: nf_conncount: fix leaked ct in error pathsFernando Fernandez Mancera
2026-01-19netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap ...Nicklas Bo Jensen
2026-01-19netfilter: nft_connlimit: update the count if add was skippedFernando Fernandez Mancera
2026-01-19netfilter: nf_conncount: rework API to use sk_buff directlyFernando Fernandez Mancera
2026-01-19netfilter: nf_conncount: reduce unnecessary GCWilliam Tu
2026-01-19netfilter: flowtable: check for maximum number of encapsulations in bridge vlanPablo Neira Ayuso
2025-12-07netfilter: nf_tables: reject duplicate device on updatesPablo Neira Ayuso
2025-10-19ipvs: Defer ip_vs_ftp unregister during netns cleanupSlavin Liu
2025-10-19netfilter: ipset: Remove unused htable_bits in macro ahash_regionZhen Ni
2025-10-19minmax: add in_range() macroMatthew Wilcox (Oracle)
2025-09-09netfilter: conntrack: helper: Replace -EEXIST by -EBUSYPhil Sutter
2025-08-28netfilter: ctnetlink: fix refcount leak on table dumpFlorian Westphal
2025-08-28netfilter: xt_nfacct: don't assume acct name is null-terminatedFlorian Westphal
2025-08-28netfilter: nf_tables: adjust lockdep assertions handlingFedor Pchelkin
2025-06-27netfilter: nf_set_pipapo_avx2: fix initial map fillFlorian Westphal
2025-06-27netfilter: nft_tunnel: fix geneve_opt dumpFernando Fernandez Mancera
2025-06-27netfilter: nft_quota: match correctly when the quota just depletedZhongqiu Duan
2025-06-04netfilter: conntrack: Bound nf_conntrack sysctl writesNicolas Bouchinet
2025-05-22netfilter: nf_tables: do not defer rule destruction via call_rcuFlorian Westphal
2025-05-22netfilter: nf_tables: wait for rcu grace period on net_device removalPablo Neira Ayuso
2025-05-22netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctxFlorian Westphal
2025-05-18netfilter: ipset: fix region locking in hash typesJozsef Kadlecsik
2025-05-02ipvs: properly dereference pe in ip_vs_add_serviceChen Hanxiao
2025-05-02nft_set_pipapo: fix incorrect avx2 match of 5th field octetFlorian Westphal
2025-04-10net: fix geneve_opt length integer overflowLin Ma
2025-04-10netfilter: nft_tunnel: fix geneve_opt type confusion additionLin Ma
2025-04-10netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets onlyPablo Neira Ayuso
2025-04-10netfilter: nft_exthdr: fix offset with ipv4_find_option()Alexey Kashavkin
2025-04-10ipvs: prevent integer overflow in do_ip_vs_get_ctl()Dan Carpenter
2025-04-10netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert...Kohei Enju
2025-04-10netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.Sebastian Andrzej Siewior
2025-03-13netfilter: nf_tables: reject mismatching sum of field_len with set key lengthPablo Neira Ayuso
2025-03-13netfilter: nft_flow_offload: update tcp state flags under lockFlorian Westphal
2025-01-23netfilter: conntrack: clamp maximum hashtable size to INT_MAXPablo Neira Ayuso
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-02 15:16:56 +0000