Show patches with: State = Action Required       |    Archived = No       |   225 patches
« 1 2 3 »
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
[01/16,net-next,v2] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack [01/16,net-next,v2] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack 1 - - - --- 2026-09-28 Fernando Fernandez Mancera New
[01/16,net-next,v3] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack [01/16,net-next,v3] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack 1 - - - --- 2026-09-30 Fernando Fernandez Mancera New
[1/2,nf-next] netfilter: nft_exthdr: remove redundant op parsing in tcp_set_init [1/2,nf-next] netfilter: nft_exthdr: remove redundant op parsing in tcp_set_init - - - - --- 2026-10-04 Fernando Fernandez Mancera New
[1/4] lib/ts_bm: advance state->offset past the reported match lib/textsearch: fix ts_bm resume offset, add tests, two small cleanups - 1 - - --- 2026-08-16 Bernard Ladenthin Under Review
[1/9,nf-next] netfilter: xtables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths netfilter: replace raw warnings with - - - - --- 2026-06-01 Fernando Fernandez Mancera New
[12/16,net-next,v2] netfilter: ipv4: guard ip_route_me_harder() with CONFIG_IPV4 [01/16,net-next,v2] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack - - - - --- 2026-09-28 Fernando Fernandez Mancera New
[12/16,net-next,v3] netfilter: ipv4: guard ip_route_me_harder() with CONFIG_IPV4 [01/16,net-next,v3] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack - - - - --- 2026-09-30 Fernando Fernandez Mancera New
[2/2,nf-next] netfilter: nft_exthdr: avoid 60 bytes stack buffer in TCP option mangling [1/2,nf-next] netfilter: nft_exthdr: remove redundant op parsing in tcp_set_init - - - - --- 2026-10-04 Fernando Fernandez Mancera New
[2/4] lib/tests: add KUnit tests for the textsearch infrastructure lib/textsearch: fix ts_bm resume offset, add tests, two small cleanups - - - - --- 2026-08-16 Bernard Ladenthin Under Review
[3/4] textsearch: align ts_state.cb like skb->cb lib/textsearch: fix ts_bm resume offset, add tests, two small cleanups - - - - --- 2026-08-16 Bernard Ladenthin Under Review
[3/9,nf-next] netfilter: nfnetlink: use DEBUG_NET_WARN_ON_ONCE for attribute validation netfilter: replace raw warnings with - - - - --- 2026-06-01 Fernando Fernandez Mancera New
[4/4] lib/ts_fsm: document that a match must consume the remaining data lib/textsearch: fix ts_bm resume offset, add tests, two small cleanups - - - - --- 2026-08-16 Bernard Ladenthin Under Review
[4/9,nf-next] netfilter: conntrack: use DEBUG_NET_WARN_ON_ONCE on packet paths netfilter: replace raw warnings with - - - - --- 2026-06-01 Fernando Fernandez Mancera New
[5/9,nf-next] netfilter: nat: use DEBUG_NET_WARN_ON_ONCE in core and helper paths netfilter: replace raw warnings with - - - - --- 2026-06-01 Fernando Fernandez Mancera New
[6.1,1/2] netfilter: nf_tables: allow to create netdev chain without device [6.1,1/2] netfilter: nf_tables: allow to create netdev chain without device - - - - --- 2026-10-02 Ma Xinmeng New
[6.1,2/2] netfilter: nf_tables: support for adding new devices to an existing netdev chain [6.1,1/2] netfilter: nf_tables: allow to create netdev chain without device - - - - --- 2026-10-02 Ma Xinmeng New
[6.1] netfilter: nf_tables: fix UAF in nf_tables_netdev_event walker [6.1] netfilter: nf_tables: fix UAF in nf_tables_netdev_event walker - - - - --- 2026-10-01 Ma Xinmeng New
[7/9,nf-next] netfilter: bpf: use DEBUG_NET_WARN_ON_ONCE for missing BTF structures netfilter: replace raw warnings with - - - - --- 2026-06-01 Fernando Fernandez Mancera New
[8/9,nf-next] netfilter: flowtable: use DEBUG_NET_WARN_ON_ONCE in offload path netfilter: replace raw warnings with - - - - --- 2026-06-01 Fernando Fernandez Mancera New
[BUG] KASAN: slab-use-after-free in hash_ipportip6_resize [BUG] KASAN: slab-use-after-free in hash_ipportip6_resize - - - - --- 2026-04-23 Eulgyu Kim Under Review
[RESEND,nf-next] netfilter: nf_conntrack_h323: fix double cursor advance in decode_int() [RESEND,nf-next] netfilter: nf_conntrack_h323: fix double cursor advance in decode_int() - 1 - - --- 2026-08-31 luoqing New
[RFC,net-next] netfilter: nf_conntrack: add ct expression support for netdev egress chains [RFC,net-next] netfilter: nf_conntrack: add ct expression support for netdev egress chains - - - - --- 2026-10-06 Hari Chandrakanthan New
[V6] netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_max sysctl [V6] netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_max sysctl - - - - --- 2025-04-15 lvxiafei Under Review
[iptables,1/3] extensions: libxt_conntrack: Fix inverted ctstate translation [iptables,1/3] extensions: libxt_conntrack: Fix inverted ctstate translation - - - - --- 2026-10-02 Phil Sutter New
[iptables,2/3] extensions: libxt_conntrack: Fix for ignored ctstates in translation [iptables,1/3] extensions: libxt_conntrack: Fix inverted ctstate translation - - - - --- 2026-10-02 Phil Sutter New
[iptables,3/3] xshared: fix crash when -4/-6 follows a restore command [iptables,1/3] extensions: libxt_conntrack: Fix inverted ctstate translation - - - - --- 2026-10-02 Phil Sutter New
[libnftnl,v5] expr: add support to math expression [libnftnl,v5] expr: add support to math expression - - - - --- 2026-09-25 Fernando Fernandez Mancera New
[net,02/11] ipvs: fix buffer overflow when sending sync messages [net,01/11] netfilter: ipset: do not update comments from kernel-side adds - 1 - - --- 2026-09-27 Pablo Neira Ayuso New
[net,1/1] ipvs: bound twos scheduler destination walks ipvs: bound twos scheduler destination walks - 1 - - --- 2026-09-12 Ren Wei New
[net,1/2] netfilter: nf_conntrack_h323: do not bypass NAT helpers when tuple source matches reply d… netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode - 1 - - --- 2026-09-23 Subham Pal New
[net,2/2] netfilter: nf_conntrack_h323: check extension bitmap before decoding components netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode - 1 - - --- 2026-09-23 Subham Pal New
[net,v2,0/8] Netfilter/IPVS fixes for net - - - - --- 2026-09-18 Pablo Neira Ayuso New
[net,v2] net: flow_offload: serialize driver callback lists [net,v2] net: flow_offload: serialize driver callback lists - 1 - - --- 2026-07-26 Weiming Shi New
[net,v2] netfilter: flowtable: flush delete work after final GC [net,v2] netfilter: flowtable: flush delete work after final GC - 1 - - --- 2026-09-27 Chengfeng Ye New
[net,v2] netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race [net,v2] netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race - 1 - - --- 2026-08-25 Cen Zhang (Microsoft) New
[net,v3] netfilter: conntrack: avoid recursive master destruction [net,v3] netfilter: conntrack: avoid recursive master destruction 1 1 - - --- 2026-10-07 Daehyeon Ko New
[net,v3] netfilter: nf_nat: recalculate TCP TS offset after SNAT port rewrite [net,v3] netfilter: nf_nat: recalculate TCP TS offset after SNAT port rewrite - 1 - - --- 2026-07-10 xietangxin New
[net,v4] net: cap skb->queue_mapping when the tx queue is picked [net,v4] net: cap skb->queue_mapping when the tx queue is picked - 1 - 1 --- 2026-09-28 Jamal Hadi Salim New
[net,v6,1/2] net: validate virtio checksum start after network header net: prevent partial checksums from modifying network headers - 2 - - --- 2026-09-22 Paulos Yibelo New
[net,v6,2/2] ip: reject partial checksums covering network headers net: prevent partial checksums from modifying network headers - 4 - - --- 2026-09-22 Paulos Yibelo New
[net-next,12/12] net: bridge: fdb: avoid VLAN lookups in unicast forwarding Untitled series #525925 - - 1 - --- 2026-09-30 Nikolay Aleksandrov New
[net-next] netfilter: nf_flow_table_bpf: populate VLAN encap in XDP flowtable lookup [net-next] netfilter: nf_flow_table_bpf: populate VLAN encap in XDP flowtable lookup - - - - --- 2026-09-24 Adriano Cordova New
[net] ipv4: validate checksum_start before completing checksum [net] ipv4: validate checksum_start before completing checksum - 2 1 - --- 2026-10-07 Michael S. Tsirkin New
[net] ipvs: Defer application parent freeing until after RCU readers [net] ipvs: Defer application parent freeing until after RCU readers 1 1 - - --- 2026-09-26 Chengfeng Ye New
[net] ipvs: fix protocol data lifetime during namespace teardown [net] ipvs: fix protocol data lifetime during namespace teardown 1 1 - - --- 2026-09-27 Chengfeng Ye New
[net] ipvs: prevent LBLCR destination leak after entry expiry [net] ipvs: prevent LBLCR destination leak after entry expiry - 1 - - --- 2026-09-29 Sung Byeongchan New
[net] netfilter: conntrack: avoid recursive master destruction [net] netfilter: conntrack: avoid recursive master destruction - 1 - - --- 2026-10-01 Daehyeon Ko New
[net] netfilter: flowtable: Saturate 16-bit flow_tuple->mtu [net] netfilter: flowtable: Saturate 16-bit flow_tuple->mtu - 1 - - --- 2026-09-10 Alice Mikityanska New
[net] netfilter: ipset: list:set: defer ip_set_put_byindex to RCU callback [net] netfilter: ipset: list:set: defer ip_set_put_byindex to RCU callback - 1 - - --- 2026-08-20 Cen Zhang (Microsoft) New
[net] netfilter: nf_conntrack_reasm: avoid truncating header offset [net] netfilter: nf_conntrack_reasm: avoid truncating header offset - 1 - - --- 2026-09-29 Sung Byeongchan New
[net] netfilter: nf_dup_netdev: scrub duplicates to preserve the direct path [net] netfilter: nf_dup_netdev: scrub duplicates to preserve the direct path - - - - --- 2026-08-04 Alexandre Ferrieux New
[net] netfilter: nf_tables: serialize offload stats with callback unbind [net] netfilter: nf_tables: serialize offload stats with callback unbind - 1 - - --- 2026-09-27 Chengfeng Ye New
[nf,1/1] ipvs: avoid stack overflow from recursive connection expiration ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-12 Zihan Xi New
[nf,1/1] ipvs: guard estimator enqueue until limits are set ipvs: guard estimator enqueue until limits are set - 1 - - --- 2026-07-27 Ren Wei New
[nf,1/1] netfilter: ebtables: avoid unbounded counter allocations netfilter: ebtables: avoid unbounded counter allocations - 1 - - --- 2026-07-27 Ren Wei New
[nf,1/1] netfilter: ecache: bound destroy event redelivery netfilter: ecache: bound destroy event redelivery - 1 - - --- 2026-09-22 Ren Wei New
[nf,1/1] netfilter: ipset: fix comment extension lifetime during hash resize [nf,1/1] netfilter: ipset: fix comment extension lifetime during hash resize - 1 - 1 --- 2026-05-13 Ren Wei kadlec Needs Review / ACK
[nf,1/1] netfilter: nf_ip6_checksum: validate checksum offset netfilter: nf_ip6_checksum: validate checksum offset - 2 - - --- 2026-09-18 Ren Wei New
[nf,1/1] netfilter: xt_IDLETIMER: restrict to init_net netfilter: xt_IDLETIMER: restrict to init_net - 1 - - --- 2026-09-07 Zhiling Zou New
[nf,1/1] netfilter: xt_time: reject pre-epoch calendar matching [nf,1/1] netfilter: xt_time: reject pre-epoch calendar matching - 1 2 - --- 2026-07-03 Ren Wei New
[nf,1/2] ipvs: avoid out-of-bounds write in ip_vs_nat_icmp_v6 ipvs: fix OOB write when NATing ICMPv6 errors quoting non-first fragments - 1 - - --- 2026-09-25 Axel Mierczuk New
[nf,1/2] ipvs: validate cport in received sync records ipvs: keep templates and cport 0 conns away from packet lookups - 1 - - --- 2026-09-25 Axel Mierczuk New
[nf,2/2] ipv6: update *offset for non-first fragments in ipv6_find_hdr() ipvs: fix OOB write when NATing ICMPv6 errors quoting non-first fragments - 1 - - --- 2026-09-25 Axel Mierczuk New
[nf,2/2] ipvs: skip cport 0 connections in ip_vs_conn_out_get() ipvs: keep templates and cport 0 conns away from packet lookups - 1 - - --- 2026-09-25 Axel Mierczuk New
[nf,v2,1/1] ipvs: wait grace period while reusing dest from trash ipvs: wait grace period while reusing dest from trash - 1 - - --- 2026-09-25 Ren Wei New
[nf,v2,1/2] ipvs: update flags and seqs in backup server under lock ipvs: read conn fields during sync atomically - 1 - - --- 2026-09-29 Julian Anastasov New
[nf,v2,1/2] netfilter: br_netfilter: restore VLAN tag on refragmented IPv6 packets netfilter: preserve bridge egress VLAN tags - 1 - - --- 2026-10-04 Andrea Parri New
[nf,v2,1/2] netfilter: flowtable: fill the vlan key from the outermost tag only netfilter: flowtable: correct and advertise the vlan match - 1 - - --- 2026-09-13 Julius Bairaktaris New
[nf,v2,2/2] ipvs: fix buffer overflow when sending sync messages ipvs: read conn fields during sync atomically - 1 - - --- 2026-09-29 Julian Anastasov New
[nf,v2,2/2] netfilter: br_netfilter: clear stale VLAN tag on refragmented packets netfilter: preserve bridge egress VLAN tags - 2 - - --- 2026-10-04 Andrea Parri New
[nf,v2,2/2] netfilter: flowtable: advertise the vlan match in used_keys [nf] netfilter: flowtable: advertise the vlan match in used_keys - 1 - - --- 2026-09-13 Julius Bairaktaris New
[nf,v2] ipvs: make destination flags atomic [nf,v2] ipvs: make destination flags atomic - 1 - - --- 2026-07-08 Yizhou Zhao Needs Review / ACK
[nf,v2] netfilter: nf_reject: initialize IPCB at inet ingress [nf,v2] netfilter: nf_reject: initialize IPCB at inet ingress - 1 - - --- 2026-08-10 David Lee New
[nf,v3] netfilter: disable br_netfilter in user namespaces [nf,v3] netfilter: disable br_netfilter in user namespaces - - 1 - --- 2026-08-31 Florian Westphal New
[nf,v3] netfilter: nf_reject: initialize IPCB at inet ingress [nf,v3] netfilter: nf_reject: initialize IPCB at inet ingress - 1 - - --- 2026-10-07 Pablo Neira Ayuso New
[nf,v3] netfilter: nft_payload: restrict checksum offsets to known values [nf,v3] netfilter: nft_payload: restrict checksum offsets to known values - 1 - - --- 2026-09-05 Florian Westphal New
[nf,v3] netfilter: nft_reject: prevent unbounded recursion in output hooks [nf,v3] netfilter: nft_reject: prevent unbounded recursion in output hooks - 1 - - --- 2026-09-24 Fernando Fernandez Mancera New
[nf,v4,1/1] netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns - 3 - - --- 2026-09-26 Zihan Xi New
[nf,v4,1/1] netfilter: x_tables: avoid holding mutex over faultable user copies netfilter: x_tables: avoid holding mutex over faultable user copies - 1 - - --- 2026-09-27 Zihan Xi New
[nf,v4,1/3] ipvs: wait the running timer cb on conn deletion ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-23 Zihan Xi New
[nf,v4,2/3] ipvs: avoid stack overflow from recursive connection expiration ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-23 Zihan Xi New
[nf,v4,3/3] ipvs: reject FTP control ports as data ports ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-23 Zihan Xi New
[nf,v5,1/1] netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns - 2 - - --- 2026-09-29 Zihan Xi New
[nf,v5,1/3] ipvs: wait the running timer cb on conn deletion ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-25 Zihan Xi New
[nf,v5,2/3] ipvs: avoid stack overflow from recursive connection expiration ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-25 Zihan Xi New
[nf,v5,3/3] ipvs: reject FTP control ports as data ports ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-25 Zihan Xi New
[nf,v6,1/3] ipvs: fix problems during connection deletion ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-10-05 Zihan Xi New
[nf,v6,2/3] ipvs: avoid stack overflow from recursive connection expiration ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-10-05 Zihan Xi New
[nf,v6,3/3] ipvs: reject FTP control ports as data ports ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-10-05 Zihan Xi New
[nf-next,1/2] netfilter: add nf_skb_sk helper and use it netfilter: do not assume skb->sk is inet sk - - - - --- 2026-10-01 Florian Westphal New
[nf-next,1/2] netfilter: nf_queue: limit the hook drop flush to the unregistered hook point [nf-next,1/2] netfilter: nf_queue: limit the hook drop flush to the unregistered hook point - - - - --- 2026-09-26 Antonio Ojea New
[nf-next,1/3] 8021q: add vlan_dev_sw_netstats_rx_add() and vlan_dev_sw_netstats_tx_add() netfilter: flowtable: update upper device stats in the fast path - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,1/4] netfilter: conntrack: pick up a TCP flow whose SYN was never answered netfilter: offload a TCP flow whose reply is never seen - - - 1 --- 2026-09-10 Julius Bairaktaris New
[nf-next,2/2] netfilter: add nf_sk_to_full_sk helper and use it netfilter: do not assume skb->sk is inet sk - - - - --- 2026-10-01 Florian Westphal New
[nf-next,2/2] selftests: netfilter: nft_queue: check the scope of the hook drop flush [nf-next,1/2] netfilter: nf_queue: limit the hook drop flush to the unregistered hook point - - - - --- 2026-09-26 Antonio Ojea New
[nf-next,2/3] netfilter: flowtable: update upper device stats in the fast path netfilter: flowtable: update upper device stats in the fast path - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,2/4] netfilter: flowtable: promote a flow offloaded in one direction only netfilter: offload a TCP flow whose reply is never seen - - - - --- 2026-09-10 Julius Bairaktaris New
[nf-next,3/3] selftests: netfilter: nft_flowtable.sh: check upper device counters netfilter: flowtable: update upper device stats in the fast path - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,3/4] netfilter: conntrack: nf_ct_seq_adjust to return error cause netfilter: Conntrack counter review - - - - --- 2026-09-08 Phil Sutter New
[nf-next,3/4] netfilter: nft_flow_offload: offload a TCP flow that has no reply netfilter: offload a TCP flow whose reply is never seen - - - - --- 2026-09-10 Julius Bairaktaris New
« 1 2 3 »