Show patches with: State = Action Required       |    Archived = No       |   196 patches
« 1 2 »
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
netfilter: nf_conntrack_h323: fix OOB read in decode_enum() netfilter: nf_conntrack_h323: fix OOB read in decode_enum() - 1 - - --- 2026-09-07 Aamir Ahmed New
[v6,nf-next,3/3] selftests: netfilter: ipvs: add per-service secure_tcp test ipvs: add per-service secure_tcp - - - - --- 2026-10-05 Adriano Cordova New
[v6,nf-next,2/3] ipvs: tcp: enable per-connection secure_tcp in state machine ipvs: add per-service secure_tcp - - - - --- 2026-10-05 Adriano Cordova New
[v6,nf-next,1/3] ipvs: add flags for per-service secure TCP state table ipvs: add per-service secure_tcp - - - - --- 2026-10-05 Adriano Cordova New
[net-next] netfilter: nf_flow_table_bpf: populate VLAN encap in XDP flowtable lookup [net-next] netfilter: nf_flow_table_bpf: populate VLAN encap in XDP flowtable lookup - - - - --- 2026-09-24 Adriano Cordova New
[v5,nf-next,3/3] selftests: netfilter: ipvs: add per-service secure_tcp test ipvs: add per-service secure_tcp - - 1 - --- 2026-09-21 Adriano Cordova New
[v5,nf-next,2/3] ipvs: tcp: enable per-connection secure_tcp in state machine ipvs: add per-service secure_tcp - - - - --- 2026-09-21 Adriano Cordova New
[v5,nf-next,1/3] ipvs: add flags for per-service secure TCP state table ipvs: add per-service secure_tcp - - - - --- 2026-09-21 Adriano Cordova New
[nf-next,v2,2/2] net: dsa: update net_device stats with HW offloaded flows stats Update (DSA) netdev stats with offloaded flows - - - - --- 2026-03-24 Ahmed Zaki Needs Review / ACK
[nf-next,v2,1/2] netfilter: flowtable: update netdev stats with HW_OFFLOAD flows Update (DSA) netdev stats with offloaded flows - - - - --- 2026-03-24 Ahmed Zaki Needs Review / ACK
[net] netfilter: nf_dup_netdev: scrub duplicates to preserve the direct path [net] netfilter: nf_dup_netdev: scrub duplicates to preserve the direct path - - - - --- 2026-08-04 Alexandre Ferrieux New
[net] netfilter: flowtable: Saturate 16-bit flow_tuple->mtu [net] netfilter: flowtable: Saturate 16-bit flow_tuple->mtu - 1 - - --- 2026-09-10 Alice Mikityanska New
[nftables] include: fix for musl with iptables v1.8.11 [nftables] include: fix for musl with iptables v1.8.11 - - - - --- 2024-12-19 Alyssa Ross New
[nf,v2,2/2] netfilter: br_netfilter: clear stale VLAN tag on refragmented packets netfilter: preserve bridge egress VLAN tags - 2 - - --- 2026-10-04 Andrea Parri New
[nf,v2,1/2] netfilter: br_netfilter: restore VLAN tag on refragmented IPv6 packets netfilter: preserve bridge egress VLAN tags - 1 - - --- 2026-10-04 Andrea Parri New
[nf-next,v2,2/2] selftests: netfilter: nft_queue: check the scope of the hook drop flush [nf-next,v2,1/2] netfilter: nf_queue: limit the hook drop flush to the unregistered hook point - - - - --- 2026-09-28 Antonio Ojea pablo New
[nf-next,v2,1/2] netfilter: nf_queue: limit the hook drop flush to the unregistered hook point [nf-next,v2,1/2] netfilter: nf_queue: limit the hook drop flush to the unregistered hook point - - - - --- 2026-09-28 Antonio Ojea pablo New
[nft] tests: shell: drop metainfo from the json dump comparison [nft] tests: shell: drop metainfo from the json dump comparison - - - - --- 2026-09-11 Avinash Duduskar New
[nft,v3] evaluate: reject negative values for unsigned datatypes [nft,v3] evaluate: reject negative values for unsigned datatypes - 1 - - --- 2026-09-11 Avinash Duduskar New
[nf,2/2] ipv6: update *offset for non-first fragments in ipv6_find_hdr() ipvs: fix OOB write when NATing ICMPv6 errors quoting non-first fragments - 1 - - --- 2026-09-25 Axel Mierczuk New
[nf,1/2] ipvs: avoid out-of-bounds write in ip_vs_nat_icmp_v6 ipvs: fix OOB write when NATing ICMPv6 errors quoting non-first fragments - 1 - - --- 2026-09-25 Axel Mierczuk New
[nf,2/2] ipvs: skip cport 0 connections in ip_vs_conn_out_get() ipvs: keep templates and cport 0 conns away from packet lookups - 1 - - --- 2026-09-25 Axel Mierczuk New
[nf,1/2] ipvs: validate cport in received sync records ipvs: keep templates and cport 0 conns away from packet lookups - 1 - - --- 2026-09-25 Axel Mierczuk New
[nf-next] netfilter: nf_nat: replace u_int16_t with u16 [nf-next] netfilter: nf_nat: replace u_int16_t with u16 - - - - --- 2026-10-02 Carlos Grillet New
[net,v2] netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race [net,v2] netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race - 1 - - --- 2026-08-25 Cen Zhang (Microsoft) New
[net] netfilter: ipset: list:set: defer ip_set_put_byindex to RCU callback [net] netfilter: ipset: list:set: defer ip_set_put_byindex to RCU callback - 1 - - --- 2026-08-20 Cen Zhang (Microsoft) New
[net,v2] netfilter: flowtable: flush delete work after final GC [net,v2] netfilter: flowtable: flush delete work after final GC - 1 - - --- 2026-09-27 Chengfeng Ye New
[net] netfilter: nf_tables: serialize offload stats with callback unbind [net] netfilter: nf_tables: serialize offload stats with callback unbind - 1 - - --- 2026-09-27 Chengfeng Ye New
[net] ipvs: fix protocol data lifetime during namespace teardown [net] ipvs: fix protocol data lifetime during namespace teardown 1 1 - - --- 2026-09-27 Chengfeng Ye New
netfilter: conntrack: wait for RCU readers before freeing the hash netfilter: conntrack: wait for RCU readers before freeing the hash - 1 - - --- 2026-09-26 Chengfeng Ye New
[net] ipvs: Defer application parent freeing until after RCU readers [net] ipvs: Defer application parent freeing until after RCU readers 1 1 - - --- 2026-09-26 Chengfeng Ye New
[net,v3] netfilter: conntrack: avoid recursive master destruction [net,v3] netfilter: conntrack: avoid recursive master destruction 1 1 - - --- 2026-10-07 Daehyeon Ko New
[v2,net] netfilter: conntrack: reject nested ctnetlink master chains [v2,net] netfilter: conntrack: reject nested ctnetlink master chains - 1 1 - --- 2026-10-02 Daehyeon Ko New
[net] netfilter: conntrack: avoid recursive master destruction [net] netfilter: conntrack: avoid recursive master destruction - 1 - - --- 2026-10-01 Daehyeon Ko New
netfilter: ipset: harden payload calculation in call_ad() netfilter: ipset: harden payload calculation in call_ad() 1 - - - --- 2026-03-13 David Baum kadlec Under Review
ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvs: clear IPv4 options after rebasing tunnel ICMP errors - 1 - - --- 2026-07-31 David Lee New
[v5,nf-next] selftests: netfilter: Add bridge_fastpath.sh [v5,nf-next] selftests: netfilter: Add bridge_fastpath.sh - - - - --- 2026-05-12 Eric Woudstra New
[v20,nf-next,2/2] netfilter: bridge: Add conntrack double vlan and pppoe conntrack: bridge: add double vlan, pppoe and pppoe-in-q - - - - --- 2026-05-12 Eric Woudstra New
[v20,nf-next,1/2] netfilter: utils: nf_ip(6)_checksum(_partial) correct data!=networkheader conntrack: bridge: add double vlan, pppoe and pppoe-in-q - - - - --- 2026-05-12 Eric Woudstra New
[v12,nf-next] bridge: Introduce DEV_PATH_BR_VLAN_KEEP_HW [v12,nf-next] bridge: Introduce DEV_PATH_BR_VLAN_KEEP_HW - - - - --- 2026-03-17 Eric Woudstra Needs Review / ACK
[BUG] KASAN: slab-use-after-free in hash_ipportip6_resize [BUG] KASAN: slab-use-after-free in hash_ipportip6_resize - - - - --- 2026-04-23 Eulgyu Kim Under Review
[nf-next,RFC] netfilter: nft_exthdr: add inner option type search for MPTCP [nf-next,RFC] netfilter: nft_exthdr: add inner option type search for MPTCP - - - - --- 2026-10-08 Fernando Fernandez Mancera New
[nft,v2] doc: add MPTCP subtypes documentation to man page [nft,v2] doc: add MPTCP subtypes documentation to man page - - 1 - --- 2026-10-06 Fernando Fernandez Mancera New
[nft] doc: add MPTCP subtypes documentation to man page [nft] doc: add MPTCP subtypes documentation to man page - - - - --- 2026-09-29 Fernando Fernandez Mancera New
[libnftnl,v5] expr: add support to math expression [libnftnl,v5] expr: add support to math expression - - - - --- 2026-09-25 Fernando Fernandez Mancera New
[nf-next,v6] netfilter: nf_tables: add math expression support [nf-next,v6] netfilter: nf_tables: add math expression support - - - - --- 2026-09-25 Fernando Fernandez Mancera New
[nf,v3] netfilter: nft_reject: prevent unbounded recursion in output hooks [nf,v3] netfilter: nft_reject: prevent unbounded recursion in output hooks - 1 - - --- 2026-09-24 Fernando Fernandez Mancera New
[nf-next] netfilter: nft_nat: use the right enum members for nat type switch [nf-next] netfilter: nft_nat: use the right enum members for nat type switch 1 1 - - --- 2026-09-22 Fernando Fernandez Mancera New
[nf-next] netfilter: conntrack: prevent nf_conntrack_buckets race condition [nf-next] netfilter: conntrack: prevent nf_conntrack_buckets race condition - 1 - - --- 2026-09-11 Fernando Fernandez Mancera New
[nf-next] netfilter: nf_conntrack: limit expectation master chain depth [nf-next] netfilter: nf_conntrack: limit expectation master chain depth - - - - --- 2026-10-07 Florian Westphal New
[nft] tests: shell: add conntrack template attachment test [nft] tests: shell: add conntrack template attachment test - - - - --- 2026-10-06 Florian Westphal New
[nf-next] netfilter: nft_compat: restrict raw table targets/matches [nf-next] netfilter: nft_compat: restrict raw table targets/matches - 1 - - --- 2026-10-06 Florian Westphal New
[nf-next] netfilter: nft_ct: validate hook and priority for ct zone set [nf-next] netfilter: nft_ct: validate hook and priority for ct zone set - 1 - - --- 2026-10-06 Florian Westphal New
[nf-next] selftests: netfilter: fix return value in zone subtest [nf-next] selftests: netfilter: fix return value in zone subtest - 1 1 - --- 2026-10-06 Florian Westphal New
[nf-next] netfilter: nfnetlink_log: collapse both dev log blocks [nf-next] netfilter: nfnetlink_log: collapse both dev log blocks - - - - --- 2026-10-02 Florian Westphal New
[v2,nf-next] netfilter: conntrack: add and use nf_ct_get_real() [v2,nf-next] netfilter: conntrack: add and use nf_ct_get_real() - - - - --- 2026-09-23 Florian Westphal New
[v3,nf,6/6] netfilter: nft_ct: validate timeout object protocol netfilter: harden conntrack vs ingress pipeline rewrites - 1 - - --- 2026-09-18 Florian Westphal New
[v3,nf,5/6] netfilter: nf_conntrack: harden helper invocation with tuple revalidation netfilter: harden conntrack vs ingress pipeline rewrites - 1 - - --- 2026-09-18 Florian Westphal New
[v3,nf,4/6] netfilter: conntrack: replace open-coded helper invocation netfilter: harden conntrack vs ingress pipeline rewrites - 1 - - --- 2026-09-18 Florian Westphal New
[v3,nf,3/6] netfilter: nf_conntrack: verify L4 protocol before calling helper netfilter: harden conntrack vs ingress pipeline rewrites - 1 - - --- 2026-09-18 Florian Westphal New
[v3,nf,2/6] netfilter: nf_conntrack: refactor helper call logic in nf_confirm() netfilter: harden conntrack vs ingress pipeline rewrites - 1 - - --- 2026-09-18 Florian Westphal New
[v3,nf,1/6] netfilter: nf_conntrack: validate skb->_nfct and packet headers netfilter: harden conntrack vs ingress pipeline rewrites - 1 - - --- 2026-09-18 Florian Westphal New
[nf,v3] netfilter: nft_payload: restrict checksum offsets to known values [nf,v3] netfilter: nft_payload: restrict checksum offsets to known values - 1 - - --- 2026-09-05 Florian Westphal New
[RFC,net-next] netfilter: bridge: refragment reassembled packets passed up [RFC,net-next] netfilter: bridge: refragment reassembled packets passed up - 1 - - --- 2026-10-09 Gabriel Goller New
[nft,2/2] tests: shell: add JSON delete test for ct stateful objects parser_json: fix JSON delete of ct stateful objects - - - - --- 2026-08-11 Gergely Palotas New
[nft,1/2] parser_json: fix CMD_OBJ/NFT_OBJECT mismatch in delete path parser_json: fix JSON delete of ct stateful objects - - - - --- 2026-08-11 Gergely Palotas New
netfilter: nf_conntrack_h323: fix NULL deref in decode_seqof() netfilter: nf_conntrack_h323: fix NULL deref in decode_seqof() - - - - --- 2026-10-12 Guanglei Zhu New
[nf-next,v3,2/2] netfilter: ebtables: ebt_802_3: fix control format test and the ni type offset [nf-next,v3,1/2] netfilter: ebtables: ebt_802_3: check the LLC fields before reading them - - - - --- 2026-10-12 Guo Zihao New
[nf-next,v3,1/2] netfilter: ebtables: ebt_802_3: check the LLC fields before reading them [nf-next,v3,1/2] netfilter: ebtables: ebt_802_3: check the LLC fields before reading them - 1 1 - --- 2026-10-12 Guo Zihao New
[RFC,net-next] netfilter: nf_conntrack: add ct expression support for netdev egress chains [RFC,net-next] netfilter: nf_conntrack: add ct expression support for netdev egress chains - - - - --- 2026-10-06 Hari Chandrakanthan New
netfilter: nf_nat: fix unsigned range_size underflow for ICMP and GRE when max < min netfilter: nf_nat: fix unsigned range_size underflow for ICMP and GRE when max < min - 1 - - --- 2026-09-19 Hui Peng New
netfilter: nfnetlink_log: fix config error handling, SIT headroom OOB read, and nlmsg rollback netfilter: nfnetlink_log: fix config error handling, SIT headroom OOB read, and nlmsg rollback - 1 - - --- 2026-09-19 Hui Peng New
[net,v4] net: cap skb->queue_mapping when the tx queue is picked [net,v4] net: cap skb->queue_mapping when the tx queue is picked - 1 - 1 --- 2026-09-28 Jamal Hadi Salim New
selftests: netfilter: fix nft_audit.sh auditd detection selftests: netfilter: fix nft_audit.sh auditd detection - - - - --- 2026-09-11 Jin Li New
[nf-next,v2] netfilter: nf_conntrack_sip: only honour Via: port in original direction [nf-next,v2] netfilter: nf_conntrack_sip: only honour Via: port in original direction - 1 - - --- 2026-10-08 Joas Antonio dos Santos New
[nf-next,v3] netfilter: ip6t_NPT: ensure skb is writable before header modification [nf-next,v3] netfilter: ip6t_NPT: ensure skb is writable before header modification - 2 - - --- 2026-10-07 Joas Antonio dos Santos New
[nf] netfilter: nf_conntrack_sip: only honour Via: port in original direction [nf] netfilter: nf_conntrack_sip: only honour Via: port in original direction - 1 - - --- 2026-10-07 Joas Antonio dos Santos New
ipvs: skip committing sync_threshold when proc_dointvec fails ipvs: skip committing sync_threshold when proc_dointvec fails 1 - - - --- 2026-09-22 Joel Granados New
[nf] ipvs: do not create conns from packets with port 0 [nf] ipvs: do not create conns from packets with port 0 - 1 - - --- 2026-10-03 Julian Anastasov New
[nf,v2,2/2] ipvs: fix buffer overflow when sending sync messages ipvs: read conn fields during sync atomically - 1 - - --- 2026-09-29 Julian Anastasov New
[nf,v2,1/2] ipvs: update flags and seqs in backup server under lock ipvs: read conn fields during sync atomically - 1 - - --- 2026-09-29 Julian Anastasov New
[nf] ipvs: read the seq_mask only once on sync [nf] ipvs: read the seq_mask only once on sync - 1 - - --- 2026-09-09 Julian Anastasov New
[nf] ipvs: fix more races around the overload flag [nf] ipvs: fix more races around the overload flag - 1 - - --- 2026-09-07 Julian Anastasov New
[nf-next,v3,3/3] selftests: netfilter: nft_flowtable.sh: check the priority a flow carries netfilter: flowtable: carry a priority into the offload - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v3,2/3] netfilter: flowtable: carry a priority into the offload netfilter: flowtable: carry a priority into the offload - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v3,1/3] net/mlx5e: Ignore FLOW_ACTION_PRIORITY on flowtable offload netfilter: flowtable: carry a priority into the offload - - 1 - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v2,4/4] selftests: netfilter: cover a TCP flow whose reply is never seen netfilter: offload a TCP flow whose reply is never seen - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v2,3/4] netfilter: nft_flow_offload: offload a TCP flow that has no reply netfilter: offload a TCP flow whose reply is never seen - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v2,2/4] netfilter: flowtable: promote a flow offloaded in one direction only netfilter: offload a TCP flow whose reply is never seen - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v2,1/4] netfilter: conntrack: pick up a TCP flow whose SYN was never answered netfilter: offload a TCP flow whose reply is never seen - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,3/3] selftests: netfilter: nft_flowtable.sh: check upper device counters netfilter: flowtable: update upper device stats in the fast path - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,2/3] netfilter: flowtable: update upper device stats in the fast path netfilter: flowtable: update upper device stats in the fast path - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,1/3] 8021q: add vlan_dev_sw_netstats_rx_add() and vlan_dev_sw_netstats_tx_add() netfilter: flowtable: update upper device stats in the fast path - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v6,2/2] selftests: netfilter: nft_flowtable.sh: roam a host between two bridge ports netfilter: flowtable: tear down bridged flows on layer 2 roaming - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v6,1/2] netfilter: flowtable: tear down direct xmit flows when the fdb entry moves netfilter: flowtable: tear down bridged flows on layer 2 roaming - - - - --- 2026-10-04 Julius Bairaktaris New
[nf,v2,2/2] netfilter: flowtable: advertise the vlan match in used_keys [nf] netfilter: flowtable: advertise the vlan match in used_keys - 1 - - --- 2026-09-13 Julius Bairaktaris New
[nf,v2,1/2] netfilter: flowtable: fill the vlan key from the outermost tag only netfilter: flowtable: correct and advertise the vlan match - 1 - - --- 2026-09-13 Julius Bairaktaris New
netfilter: nf_conntrack: avoid truncating IPv6 nexthdr offset netfilter: nf_conntrack: avoid truncating IPv6 nexthdr offset - 1 - - --- 2026-08-22 Jérémy Jean New
netfilter: nf_conntrack: validate template helper protocol netfilter: nf_conntrack: validate template helper protocol - 1 - - --- 2026-08-10 Kyle Zeng Under Review
[net-next,2/4] net: use ip4_parse() in receive validation Untitled series #527721 - - - - --- 2026-10-13 Michael S. Tsirkin New
« 1 2 »