Show patches with: State = Action Required       |   204 patches
« 1 2 3 »
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
[1/9,nf-next] netfilter: xtables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths netfilter: replace raw warnings with - - - - --- 2026-06-01 Fernando Fernandez Mancera New
[3/9,nf-next] netfilter: nfnetlink: use DEBUG_NET_WARN_ON_ONCE for attribute validation netfilter: replace raw warnings with - - - - --- 2026-06-01 Fernando Fernandez Mancera New
[4/9,nf-next] netfilter: conntrack: use DEBUG_NET_WARN_ON_ONCE on packet paths netfilter: replace raw warnings with - - - - --- 2026-06-01 Fernando Fernandez Mancera New
[5/9,nf-next] netfilter: nat: use DEBUG_NET_WARN_ON_ONCE in core and helper paths netfilter: replace raw warnings with - - - - --- 2026-06-01 Fernando Fernandez Mancera New
[7/9,nf-next] netfilter: bpf: use DEBUG_NET_WARN_ON_ONCE for missing BTF structures netfilter: replace raw warnings with - - - - --- 2026-06-01 Fernando Fernandez Mancera New
[8/9,nf-next] netfilter: flowtable: use DEBUG_NET_WARN_ON_ONCE in offload path netfilter: replace raw warnings with - - - - --- 2026-06-01 Fernando Fernandez Mancera New
[BUG] KASAN: slab-use-after-free in hash_ipportip6_resize [BUG] KASAN: slab-use-after-free in hash_ipportip6_resize - - - - --- 2026-04-23 Eulgyu Kim Under Review
[RESEND,nf-next] netfilter: nf_conntrack_h323: fix double cursor advance in decode_int() [RESEND,nf-next] netfilter: nf_conntrack_h323: fix double cursor advance in decode_int() - 1 - - --- 2026-08-31 luoqing New
[RFC,net-next] netfilter: bridge: refragment reassembled packets passed up [RFC,net-next] netfilter: bridge: refragment reassembled packets passed up - 1 - - --- 2026-10-09 Gabriel Goller New
[RFC,net-next] netfilter: nf_conntrack: add ct expression support for netdev egress chains [RFC,net-next] netfilter: nf_conntrack: add ct expression support for netdev egress chains - - - - --- 2026-10-06 Hari Chandrakanthan New
[V6] netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_max sysctl [V6] netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_max sysctl - - - - --- 2025-04-15 lvxiafei Under Review
[iptables,1/3] extensions: libxt_conntrack: Fix inverted ctstate translation [iptables,1/3] extensions: libxt_conntrack: Fix inverted ctstate translation - - - - --- 2026-10-02 Phil Sutter New
[iptables,2/3] extensions: libxt_conntrack: Fix for ignored ctstates in translation [iptables,1/3] extensions: libxt_conntrack: Fix inverted ctstate translation - - - - --- 2026-10-02 Phil Sutter New
[iptables,3/3] xshared: fix crash when -4/-6 follows a restore command [iptables,1/3] extensions: libxt_conntrack: Fix inverted ctstate translation - - - - --- 2026-10-02 Phil Sutter New
[iptables] extensions: libxt_conntrack: Fail on untranslatable state match [iptables] extensions: libxt_conntrack: Fail on untranslatable state match - 1 - - --- 2026-10-08 Phil Sutter New
[libnftnl,v5] expr: add support to math expression [libnftnl,v5] expr: add support to math expression - - - - --- 2026-09-25 Fernando Fernandez Mancera New
[net,1/1] ipvs: bound twos scheduler destination walks ipvs: bound twos scheduler destination walks - 1 - - --- 2026-09-12 Ren Wei New
[net,1/2] netfilter: nf_conntrack_h323: do not bypass NAT helpers when tuple source matches reply d… netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode - 1 - - --- 2026-09-23 Subham Pal New
[net,2/2] netfilter: nf_conntrack_h323: check extension bitmap before decoding components netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode - 1 - - --- 2026-09-23 Subham Pal New
[net,v2,0/8] Netfilter/IPVS fixes for net - - - - --- 2026-09-18 Pablo Neira Ayuso New
[net,v2] net: flow_offload: serialize driver callback lists [net,v2] net: flow_offload: serialize driver callback lists - 1 - - --- 2026-07-26 Weiming Shi New
[net,v2] netfilter: flowtable: flush delete work after final GC [net,v2] netfilter: flowtable: flush delete work after final GC - 1 - - --- 2026-09-27 Chengfeng Ye New
[net,v2] netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race [net,v2] netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race - 1 - - --- 2026-08-25 Cen Zhang (Microsoft) New
[net,v2] netfilter: nf_conntrack_reasm: avoid truncating header offsets [net,v2] netfilter: nf_conntrack_reasm: avoid truncating header offsets - 1 - - --- 2026-10-08 Sung Byeongchan New
[net,v3] netfilter: conntrack: avoid recursive master destruction [net,v3] netfilter: conntrack: avoid recursive master destruction 1 1 - - --- 2026-10-07 Daehyeon Ko New
[net,v3] netfilter: nf_nat: recalculate TCP TS offset after SNAT port rewrite [net,v3] netfilter: nf_nat: recalculate TCP TS offset after SNAT port rewrite - 1 - - --- 2026-07-10 xietangxin New
[net,v4] net: cap skb->queue_mapping when the tx queue is picked [net,v4] net: cap skb->queue_mapping when the tx queue is picked - 1 - 1 --- 2026-09-28 Jamal Hadi Salim New
[net,v6,1/2] net: validate virtio checksum start after network header net: prevent partial checksums from modifying network headers - 2 - - --- 2026-09-22 Paulos Yibelo New
[net,v6,2/2] ip: reject partial checksums covering network headers net: prevent partial checksums from modifying network headers - 4 - - --- 2026-09-22 Paulos Yibelo New
[net-next,00/15] Netfilter/IPVS updates for net-next - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,01/15] netfilter: disable br_netfilter in user namespaces [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - 1 - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,02/15] netfilter: flowtable: recognize IPv4/IPv6 in tunnel proto matching [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,03/15] netfilter: flowtable: set inner protocol when popping tunnel header [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,04/15] netfilter: flowtable: populate tunnel tuple regardless of inner protocol [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,05/15] netfilter: flowtable: add encap_proto to flow_offload_tunnel [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,06/15] netfilter: flowtable: refactor MTU check for tunnel offload [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,07/15] netfilter: flowtable: unify tunnel push for IPv4 and IPv6 [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,08/15] selftests: netfilter: nft_queue.sh: only queue icmp echo request/reply [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - 1 - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,09/15] ipvs: fix buffer overflow when sending sync messages [net-next,01/15] netfilter: disable br_netfilter in user namespaces - 1 - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,10/15] netfilter: conntrack: fix unlikely UaF in gc worker [net-next,01/15] netfilter: disable br_netfilter in user namespaces - 1 - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,11/15] netfilter: nf_tables: switch chain_types array to rcu [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,12/15] netfilter: add nf_skb_sk helper and use it [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,13/15] netfilter: add nf_sk_to_full_sk helper and use it [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,14/15] netfilter: nft_exthdr: remove redundant op parsing in tcp_set_init [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,15/15] netfilter: nft_exthdr: avoid 60 bytes stack buffer in TCP option mangling [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,2/4] net: use ip4_parse() in receive validation Untitled series #527721 - - - - --- 2026-10-13 Michael S. Tsirkin New
[net-next] netfilter: nf_flow_table_bpf: populate VLAN encap in XDP flowtable lookup [net-next] netfilter: nf_flow_table_bpf: populate VLAN encap in XDP flowtable lookup - - - - --- 2026-09-24 Adriano Cordova New
[net] ipvs: Defer application parent freeing until after RCU readers [net] ipvs: Defer application parent freeing until after RCU readers 1 1 - - --- 2026-09-26 Chengfeng Ye New
[net] ipvs: fix protocol data lifetime during namespace teardown [net] ipvs: fix protocol data lifetime during namespace teardown 1 1 - - --- 2026-09-27 Chengfeng Ye New
[net] ipvs: prevent LBLCR destination leak after entry expiry [net] ipvs: prevent LBLCR destination leak after entry expiry - 1 - - --- 2026-09-29 Sung Byeongchan New
[net] netfilter: conntrack: avoid recursive master destruction [net] netfilter: conntrack: avoid recursive master destruction - 1 - - --- 2026-10-01 Daehyeon Ko New
[net] netfilter: flowtable: Saturate 16-bit flow_tuple->mtu [net] netfilter: flowtable: Saturate 16-bit flow_tuple->mtu - 1 - - --- 2026-09-10 Alice Mikityanska New
[net] netfilter: ipset: list:set: defer ip_set_put_byindex to RCU callback [net] netfilter: ipset: list:set: defer ip_set_put_byindex to RCU callback - 1 - - --- 2026-08-20 Cen Zhang (Microsoft) New
[net] netfilter: nf_dup_netdev: scrub duplicates to preserve the direct path [net] netfilter: nf_dup_netdev: scrub duplicates to preserve the direct path - - - - --- 2026-08-04 Alexandre Ferrieux New
[net] netfilter: nf_tables: serialize offload stats with callback unbind [net] netfilter: nf_tables: serialize offload stats with callback unbind - 1 - - --- 2026-09-27 Chengfeng Ye New
[nf,1/1] ipvs: avoid stack overflow from recursive connection expiration ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-12 zihan xi New
[nf,1/1] ipvs: guard estimator enqueue until limits are set ipvs: guard estimator enqueue until limits are set - 1 - - --- 2026-07-27 Ren Wei New
[nf,1/1] netfilter: ebtables: avoid unbounded counter allocations netfilter: ebtables: avoid unbounded counter allocations - 1 - - --- 2026-07-27 Ren Wei New
[nf,1/1] netfilter: ipset: fix comment extension lifetime during hash resize [nf,1/1] netfilter: ipset: fix comment extension lifetime during hash resize - 1 - 1 --- 2026-05-13 Ren Wei kadlec Needs Review / ACK
[nf,1/1] netfilter: xt_IDLETIMER: restrict to init_net netfilter: xt_IDLETIMER: restrict to init_net - 1 - - --- 2026-09-07 Zhiling Zou New
[nf,1/1] netfilter: xt_time: reject pre-epoch calendar matching [nf,1/1] netfilter: xt_time: reject pre-epoch calendar matching - 1 2 - --- 2026-07-03 Ren Wei New
[nf,1/2] ipvs: avoid out-of-bounds write in ip_vs_nat_icmp_v6 ipvs: fix OOB write when NATing ICMPv6 errors quoting non-first fragments - 1 - - --- 2026-09-25 Axel Mierczuk New
[nf,1/2] ipvs: validate cport in received sync records ipvs: keep templates and cport 0 conns away from packet lookups - 1 - - --- 2026-09-25 Axel Mierczuk New
[nf,1/5] netfilter: xt_owner: pin file with get_file_rcu() before reading f_cred netfilter: pin file with get_file_rcu() before reading f_cred - 1 - - --- 2026-10-13 Tristan Madani New
[nf,2/2] ipv6: update *offset for non-first fragments in ipv6_find_hdr() ipvs: fix OOB write when NATing ICMPv6 errors quoting non-first fragments - 1 - - --- 2026-09-25 Axel Mierczuk New
[nf,2/2] ipvs: skip cport 0 connections in ip_vs_conn_out_get() ipvs: keep templates and cport 0 conns away from packet lookups - 1 - - --- 2026-09-25 Axel Mierczuk New
[nf,2/5] netfilter: nft_meta: pin file with get_file_rcu() before reading f_cred netfilter: pin file with get_file_rcu() before reading f_cred - 1 - - --- 2026-10-13 Tristan Madani New
[nf,3/5] netfilter: nfnetlink_log: pin file with get_file_rcu() before reading f_cred netfilter: pin file with get_file_rcu() before reading f_cred - 1 - - --- 2026-10-13 Tristan Madani New
[nf,4/5] netfilter: nfnetlink_queue: pin file with get_file_rcu() before reading f_cred netfilter: pin file with get_file_rcu() before reading f_cred - 1 - - --- 2026-10-13 Tristan Madani New
[nf,5/5] netfilter: nf_log_syslog: pin file with get_file_rcu() before reading f_cred netfilter: pin file with get_file_rcu() before reading f_cred - 1 - - --- 2026-10-13 Tristan Madani New
[nf,v2,1/1] ipvs: wait grace period while reusing dest from trash ipvs: wait grace period while reusing dest from trash - 1 - - --- 2026-09-25 Ren Wei New
[nf,v2,1/2] ipvs: update flags and seqs in backup server under lock ipvs: read conn fields during sync atomically - 1 - - --- 2026-09-29 Julian Anastasov New
[nf,v2,1/2] netfilter: br_netfilter: restore VLAN tag on refragmented IPv6 packets netfilter: preserve bridge egress VLAN tags - 1 - - --- 2026-10-04 Andrea Parri New
[nf,v2,1/2] netfilter: flowtable: fill the vlan key from the outermost tag only netfilter: flowtable: correct and advertise the vlan match - 1 - - --- 2026-09-13 Julius Bairaktaris New
[nf,v2,2/2] ipvs: fix buffer overflow when sending sync messages ipvs: read conn fields during sync atomically - 1 - - --- 2026-09-29 Julian Anastasov New
[nf,v2,2/2] netfilter: br_netfilter: clear stale VLAN tag on refragmented packets netfilter: preserve bridge egress VLAN tags - 2 - - --- 2026-10-04 Andrea Parri New
[nf,v2,2/2] netfilter: flowtable: advertise the vlan match in used_keys [nf] netfilter: flowtable: advertise the vlan match in used_keys - 1 - - --- 2026-09-13 Julius Bairaktaris New
[nf,v2] ipvs: make destination flags atomic [nf,v2] ipvs: make destination flags atomic - 1 - - --- 2026-07-08 Yizhou Zhao Needs Review / ACK
[nf,v2] netfilter: synproxy: check TCP header before verifying checksum [nf,v2] netfilter: synproxy: check TCP header before verifying checksum - 2 1 - --- 2026-10-09 Palla Raghunath New
[nf,v3] netfilter: nf_reject: initialize IPCB at inet ingress [nf,v3] netfilter: nf_reject: initialize IPCB at inet ingress - 1 - - --- 2026-10-07 Pablo Neira Ayuso New
[nf,v3] netfilter: nft_payload: restrict checksum offsets to known values [nf,v3] netfilter: nft_payload: restrict checksum offsets to known values - 1 - - --- 2026-09-05 Florian Westphal New
[nf,v3] netfilter: nft_reject: prevent unbounded recursion in output hooks [nf,v3] netfilter: nft_reject: prevent unbounded recursion in output hooks - 1 - - --- 2026-09-24 Fernando Fernandez Mancera New
[nf,v5,1/3] ipvs: wait the running timer cb on conn deletion ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-25 zihan xi New
[nf,v5,2/3] ipvs: avoid stack overflow from recursive connection expiration ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-25 zihan xi New
[nf,v5,3/3] ipvs: reject FTP control ports as data ports ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-25 zihan xi New
[nf,v6,1/1] netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns - 2 - - --- 2026-10-08 zihan xi New
[nf,v6,1/3] ipvs: fix problems during connection deletion ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-10-05 zihan xi New
[nf,v6,2/3] ipvs: avoid stack overflow from recursive connection expiration ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-10-05 zihan xi New
[nf,v6,3/3] ipvs: reject FTP control ports as data ports ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-10-05 zihan xi New
[nf,v7,1/1] netfilter: nf_dup: preserve duplication guard across NFQUEUE netfilter: nf_dup: preserve duplication guard across NFQUEUE - 2 - - --- 2026-10-11 zihan xi New
[nf-next,1/2] netfilter: add more netlink-based policy range checks [nf-next,1/2] netfilter: add more netlink-based policy range checks - - - - --- 2026-03-16 Florian Westphal Under Review
[nf-next,1/3] 8021q: add vlan_dev_sw_netstats_rx_add() and vlan_dev_sw_netstats_tx_add() netfilter: flowtable: update upper device stats in the fast path - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,2/2] netfilter: nf_tables: add netlink policy based cap on registers [nf-next,1/2] netfilter: add more netlink-based policy range checks - - - - --- 2026-03-16 Florian Westphal Under Review
[nf-next,2/3] netfilter: flowtable: update upper device stats in the fast path netfilter: flowtable: update upper device stats in the fast path - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,3/3] selftests: netfilter: nft_flowtable.sh: check upper device counters netfilter: flowtable: update upper device stats in the fast path - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,3/4] netfilter: conntrack: nf_ct_seq_adjust to return error cause netfilter: Conntrack counter review - - - - --- 2026-09-08 Phil Sutter New
[nf-next,4/4] netfilter: conntrack: Improve invalid packet stats netfilter: Conntrack counter review - - - - --- 2026-09-08 Phil Sutter New
[nf-next,RFC] netfilter: nft_exthdr: add inner option type search for MPTCP [nf-next,RFC] netfilter: nft_exthdr: add inner option type search for MPTCP - - - - --- 2026-10-08 Fernando Fernandez Mancera New
[nf-next,v2,1/2] netfilter: flowtable: update netdev stats with HW_OFFLOAD flows Update (DSA) netdev stats with offloaded flows - - - - --- 2026-03-24 Ahmed Zaki Needs Review / ACK
[nf-next,v2,1/2] netfilter: nf_conntrack_h323: do not bypass NAT helpers when tuple source matches … netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode - 1 - - --- 2026-10-06 Subham Pal New
« 1 2 3 »