index
:
kernel
0x221E-v0.0.1-v6.19
linux-2.6.11.y
linux-2.6.12.y
linux-2.6.13.y
linux-2.6.14.y
linux-2.6.15.y
linux-2.6.16.y
linux-2.6.17.y
linux-2.6.18.y
linux-2.6.19.y
linux-2.6.20.y
linux-2.6.21.y
linux-2.6.22.y
linux-2.6.23.y
linux-2.6.24.y
linux-2.6.25.y
linux-2.6.26.y
linux-2.6.27.y
linux-2.6.28.y
linux-2.6.29.y
linux-2.6.30.y
linux-2.6.31.y
linux-2.6.32.y
linux-2.6.33.y
linux-2.6.34.y
linux-2.6.35.y
linux-2.6.36.y
linux-2.6.37.y
linux-2.6.38.y
linux-2.6.39.y
linux-3.0.y
linux-3.1.y
linux-3.10.y
linux-3.11.y
linux-3.12.y
linux-3.13.y
linux-3.14.y
linux-3.15.y
linux-3.16.y
linux-3.17.y
linux-3.18.y
linux-3.19.y
linux-3.2.y
linux-3.3.y
linux-3.4.y
linux-3.5.y
linux-3.6.y
linux-3.7.y
linux-3.8.y
linux-3.9.y
linux-4.0.y
linux-4.1.y
linux-4.10.y
linux-4.11.y
linux-4.12.y
linux-4.13.y
linux-4.14.y
linux-4.15.y
linux-4.16.y
linux-4.17.y
linux-4.18.y
linux-4.19.y
linux-4.2.y
linux-4.20.y
linux-4.3.y
linux-4.4.y
linux-4.5.y
linux-4.6.y
linux-4.7.y
linux-4.8.y
linux-4.9.y
linux-5.0.y
linux-5.1.y
linux-5.10.y
linux-5.11.y
linux-5.12.y
linux-5.13.y
linux-5.14.y
linux-5.15.y
linux-5.16.y
linux-5.17.y
linux-5.18.y
linux-5.19.y
linux-5.2.y
linux-5.3.y
linux-5.4.y
linux-5.5.y
linux-5.6.y
linux-5.7.y
linux-5.8.y
linux-5.9.y
linux-6.0.y
linux-6.1.y
linux-6.10.y
linux-6.11.y
linux-6.12.y
linux-6.13.y
linux-6.14.y
linux-6.15.y
linux-6.16.y
linux-6.17.y
linux-6.18.y
linux-6.19.y
linux-6.2.y
linux-6.3.y
linux-6.4.y
linux-6.5.y
linux-6.6.y
linux-6.7.y
linux-6.8.y
linux-6.9.y
linux-rolling-lts
linux-rolling-stable
master
Hosts the 0x221E linux distro kernel.
Ubuntu
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
net
/
netfilter
Age
Commit message (
Expand
)
Author
2026-03-04
netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
Vahagn Vardanian
2026-03-04
netfilter: xt_tcpmss: check remaining length before reading optlen
Florian Westphal
2026-03-04
netfilter: nf_conntrack: Add allow_clash to generic protocol handler
Yuto Hamaguchi
2026-03-04
netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
Inseo An
2026-03-04
netfilter: nf_conntrack_h323: don't pass uninitialised l3num value
Florian Westphal
2026-03-04
netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets
Pablo Neira Ayuso
2026-03-04
netfilter: nft_counter: fix reset of counters on 32bit archs
Anders Grahn
2026-03-04
netfilter: nft_set_hash: fix get operation on big endian
Florian Westphal
2026-03-04
netfilter: nf_conncount: fix tracking of connections from localhost
Fernando Fernandez Mancera
2026-03-04
netfilter: nft_compat: add more restrictions on netlink attributes
Florian Westphal
2026-03-04
netfilter: nf_conncount: increase the connection clean up limit to 64
Fernando Fernandez Mancera
2026-03-04
netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH
Fernando Fernandez Mancera
2026-03-04
netfilter: nf_tables: reset table validation state on abort
Florian Westphal
2026-02-16
netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
Pablo Neira Ayuso
2026-02-16
netfilter: nf_tables: missing objects with no memcg accounting
Pablo Neira Ayuso
2026-02-11
netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()
Andrew Fasano
2026-02-11
netfilter: replace -EEXIST with -EBUSY
Daniel Gomez
2026-02-11
netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
Pablo Neira Ayuso
2026-01-17
netfilter: nf_tables: avoid chain re-validation if possible
Florian Westphal
2026-01-17
netfilter: nf_conncount: update last_gc only when GC has been performed
Fernando Fernandez Mancera
2026-01-17
netfilter: nf_tables: fix memory leak in nf_tables_newrule()
Zilin Guan
2026-01-17
netfilter: nft_synproxy: avoid possible data-race on update operation
Fernando Fernandez Mancera
2026-01-11
netfilter: nf_tables: remove redundant chain validation on register store
Pablo Neira Ayuso
2026-01-11
netfilter: nf_tables: allow loads only when register is initialized
Florian Westphal
2026-01-11
netfilter: nf_tables: pass context structure to nft_parse_register_load
Florian Westphal
2026-01-11
ipvs: fix ipv4 null-ptr-deref in route error path
Slavin Liu
2026-01-11
netfilter: nf_conncount: fix leaked ct in error paths
Fernando Fernandez Mancera
2026-01-11
netfilter: nft_connlimit: update the count if add was skipped
Fernando Fernandez Mancera
2026-01-11
netfilter: nf_conncount: rework API to use sk_buff directly
Fernando Fernandez Mancera
2026-01-11
netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
Pablo Neira Ayuso
2025-11-24
netfilter: nf_tables: reject duplicate device on updates
Pablo Neira Ayuso
2025-10-19
netfilter: nft_objref: validate objref and objrefmap expressions
Fernando Fernandez Mancera
2025-10-19
netfilter: nf_tables: drop unused 3rd argument from validate callback ops
Florian Westphal
2025-10-15
ipvs: Defer ip_vs_ftp unregister during netns cleanup
Slavin Liu
2025-10-15
ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable
Zhang Tengfei
2025-10-15
netfilter: ipset: Remove unused htable_bits in macro ahash_region
Zhen Ni
2025-09-09
netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
Phil Sutter
2025-08-28
netfilter: ctnetlink: fix refcount leak on table dump
Florian Westphal
2025-08-15
bpf: Check netfilter ctx accesses are aligned
Paul Chaignon
2025-08-15
netfilter: xt_nfacct: don't assume acct name is null-terminated
Florian Westphal
2025-08-15
bpf: Disable migration in nf_hook_run_bpf().
Kuniyuki Iwashima
2025-08-15
netfilter: nf_tables: adjust lockdep assertions handling
Fedor Pchelkin
2025-08-15
netfilter: nf_tables: Drop dead code from fill_*_info routines
Phil Sutter
2025-07-24
netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
Florian Westphal
2025-06-19
netfilter: nf_nat: also check reverse tuple to obtain clashing entry
Florian Westphal
2025-06-19
netfilter: nf_set_pipapo_avx2: fix initial map fill
Florian Westphal
2025-06-19
netfilter: nft_tunnel: fix geneve_opt dump
Fernando Fernandez Mancera
2025-06-19
netfilter: nft_quota: match correctly when the quota just depleted
Zhongqiu Duan
2025-06-04
netfilter: conntrack: Bound nf_conntrack sysctl writes
Nicolas Bouchinet
2025-05-18
netfilter: ipset: fix region locking in hash types
Jozsef Kadlecsik
[next]
