Toggle navigation
Patchwork
Netfilter Development
Patches
Bundles
About this project
Login
Register
Mail settings
Show patches with
: none
| 36585 patches
Series
Submitter
State
any
Action Required
New
Under Review
Accepted
Rejected
RFC
Not Applicable
Changes Requested
Awaiting Upstream
Superseded
Deferred
Needs Review / ACK
Handled Elsewhere
Search
Archived
No
Yes
Both
Delegate
------
Nobody
jgarzik
arnd
ymano
jlayton
tseliot
ogasawara
amitk
awhitcroft
mst
dayangkun
jwboyer
jwboyer
colinking
colinking
azummo
dwmw2
rtg
sconklin
smb
smfrench
aliguori
bradf
demarchi
ms
bhundven
chbs
kengyu
kadlec
regit
jabk
laforge
laforge
tonyb
alai
zecke
zecke
__damien__
luka
luka
prafulla@marvell.com
cyrus
PeterHuewe
kiho
jow
jow
ypwong
nico
dedeckeh
dedeckeh
yousong
yousong
tomcwarren
mb
mrchuck
vineetg76
computersforpeace
patrick_delaunay
Noltari
Noltari
ee07b291
ldir
ldir
stefanct
zhouhan
carldani
blp
ffainelli
ffainelli
regXboi
bbrezillon
pravin
mkp
jpettit
mkresin
mkresin
thess
thess
fbarrat
fbarrat
phil
linville
jesse
tjaalton
esben
abrodkin
abrodkin
diproiettod
tbot
stephenfin
ajd
darball1
sammj
jogo
jogo
bhelgaas
blogic
blogic
oohal
russellb
ptomsich
agraf
joestringer
mwalle
pepe2k
pepe2k
tagr
tagr
arj
arj
davem
davem
davem
pchotard
andmur01
jforissier
amitay
matttbe
pabeni
istokes
martineau
goliath
Ansuel
danielschwierzeck
aparcar
maddy
mkorpershoek
mariosix
dcaratti
aserdean
ovsrobot
ovsrobot
marex
tpetazzoni
khem
XiaoYang
mmichelson
apritzel
danielhb
groug
npiggin
liwang
robimarko
pareddja
atishp
netdrv
mkubecek
stintel
stintel
jkicinski
cpitchen
dsa
jstancek
bpf
shettyg
lorpie01
wigyori
wigyori
pm215
acelan
apopple
dja
alexhung
lynxis
lynxis
brgl
brgl
peda
akodanev
0andriy
981213
narmstrong
snowpatch_ozlabs
snowpatch_ozlabs
snowpatch_ozlabs
aivanov
atishp04
vigneshr
blocktrron
mraynal
monstr
shemminger
chunkeey
stewart
stewart
kabel
Jaehoon
rfried
arbab
sjg
bmeng
ehristev
wsa
rsalvaterra
adrianschmutzler
hegdevasant
hegdevasant
horms
ukleinek
ukleinek
ag
metan
jagan
jacmet
rmilecki
rmilecki
kevery
ivanhu
prom
freenix
akumar
trini
juju
abelloni
legoater
legoater
legoater
chleroy
wbx
rw
rw
apconole
pablo
pablo
svanheule
bjonglez
dangole
dangole
sbabic
sbabic
ynezz
xback
xback
pevik
richiejp
jonhunter
aik
Hauke
Hauke
forty
acer
amusil
anuppatel
anuppatel
next_ghost
echaudron
benh
rgrimm
passgat
segher
pratyush
jms
jms
jms
mans0n
ruscur
Andes
ymorin
lliang
xuyang
linusw
linusw
jmberg
numans
xypron
festevam
tim609
jk
jk
jk
jk
conchuod
ltpci
matthias_bgg
kubu
tytso
tambarus
strlen
strlen
pbrobinson
krzk
dceara
spectrum
apalos
qschulz
stroese
imaximets
neocturne
cazzacarna
aldot
ziyao233
sshegde
riteshlist
tperale
TIENFONG
mpe
galak
sfr
arnout
ktraynor
nbd
nbd
robh
kcxt
anguy11
paulus
mwilczynski
airtower
jm
Bubu
hs
vfazio
iTitou
dlech
jstephan
raymo200915
Apply
«
1
2
3
4
…
365
366
»
Patch
Series
A/F/R/T
S/W/F
Date
Submitter
Delegate
State
netfilter: xt_dccp: handle reserved options as single-byte
netfilter: xt_dccp: handle reserved options as single-byte
- 1 - -
-
-
-
2026-10-08
sung byeongchan
New
[iptables] extensions: libxt_conntrack: Fail on untranslatable state match
[iptables] extensions: libxt_conntrack: Fail on untranslatable state match
- 1 - -
-
-
-
2026-10-08
Phil Sutter
New
[nf-next,RFC] netfilter: nft_exthdr: add inner option type search for MPTCP
[nf-next,RFC] netfilter: nft_exthdr: add inner option type search for MPTCP
- - - -
-
-
-
2026-10-08
Fernando Fernandez Mancera
New
[nf-next,v2] netfilter: nf_conntrack_sip: only honour Via: port in original direction
[nf-next,v2] netfilter: nf_conntrack_sip: only honour Via: port in original direction
- 1 - -
-
-
-
2026-10-08
Joas Antonio dos Santos
New
[nf,v5,1/1] netfilter: x_tables: avoid holding mutex over faultable user copies
netfilter: x_tables: avoid holding mutex over faultable user copies
- 1 - -
-
-
-
2026-10-08
zihan xi
New
[nf,v6,1/1] netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns
netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns
- 2 - -
-
-
-
2026-10-08
zihan xi
New
[v3] netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets
[v3] netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets
- 1 - -
-
-
-
2026-10-08
lvjunyu
New
[net,v2] netfilter: nf_conntrack_reasm: avoid truncating header offsets
[net,v2] netfilter: nf_conntrack_reasm: avoid truncating header offsets
- 1 - -
-
-
-
2026-10-08
sung byeongchan
New
[net,v2] netfilter: ebtables: ebt_802_3: check the LLC fields before reading them
[net,v2] netfilter: ebtables: ebt_802_3: check the LLC fields before reading them
- 1 1 -
-
-
-
2026-10-08
Guo Zihao
New
[nf-next,v5] netfilter: flowtable: initial bridge support
[nf-next,v5] netfilter: flowtable: initial bridge support
- - - -
-
-
-
2026-10-07
Pablo Neira Ayuso
New
[nf] netfilter: nft_set_rbtree: narrow down range completion to anonymous sets
[nf] netfilter: nft_set_rbtree: narrow down range completion to anonymous sets
- 1 - -
-
-
-
2026-10-07
Pablo Neira Ayuso
New
[nf,v3] netfilter: nf_reject: initialize IPCB at inet ingress
[nf,v3] netfilter: nf_reject: initialize IPCB at inet ingress
- 1 - -
-
-
-
2026-10-07
Pablo Neira Ayuso
New
netfilter: nft_set_pipapo: skip transaction elements during GC
netfilter: nft_set_pipapo: skip transaction elements during GC
- 1 - -
-
-
-
2026-10-07
Bui Viet Dung
New
[nf-next,v3] netfilter: ip6t_NPT: ensure skb is writable before header modification
[nf-next,v3] netfilter: ip6t_NPT: ensure skb is writable before header modification
- 2 - -
-
-
-
2026-10-07
Joas Antonio dos Santos
New
[nf] netfilter: nf_conntrack_sip: only honour Via: port in original direction
[nf] netfilter: nf_conntrack_sip: only honour Via: port in original direction
- 1 - -
-
-
-
2026-10-07
Joas Antonio dos Santos
New
[nf-next] netfilter: nf_conntrack: limit expectation master chain depth
[nf-next] netfilter: nf_conntrack: limit expectation master chain depth
- - - -
-
-
-
2026-10-07
Florian Westphal
New
[net,v3] netfilter: conntrack: avoid recursive master destruction
[net,v3] netfilter: conntrack: avoid recursive master destruction
1 1 - -
-
-
-
2026-10-07
Daehyeon Ko
New
[nft] tests: shell: add conntrack template attachment test
[nft] tests: shell: add conntrack template attachment test
- - - -
-
-
-
2026-10-06
Florian Westphal
New
[nf-next] netfilter: nft_compat: restrict raw table targets/matches
[nf-next] netfilter: nft_compat: restrict raw table targets/matches
- 1 - -
-
-
-
2026-10-06
Florian Westphal
New
[nf-next] netfilter: nft_ct: validate hook and priority for ct zone set
[nf-next] netfilter: nft_ct: validate hook and priority for ct zone set
- 1 - -
-
-
-
2026-10-06
Florian Westphal
New
[nf-next] selftests: netfilter: fix return value in zone subtest
[nf-next] selftests: netfilter: fix return value in zone subtest
- 1 1 -
-
-
-
2026-10-06
Florian Westphal
New
[nft,v2] doc: add MPTCP subtypes documentation to man page
[nft,v2] doc: add MPTCP subtypes documentation to man page
- - 1 -
-
-
-
2026-10-06
Fernando Fernandez Mancera
New
[RFC,net-next] netfilter: nf_conntrack: add ct expression support for netdev egress chains
[RFC,net-next] netfilter: nf_conntrack: add ct expression support for netdev egress chains
- - - -
-
-
-
2026-10-06
Hari Chandrakanthan
New
[nf-next,v2,2/2] netfilter: nf_conntrack_h323: check extension bitmap before decoding components
netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode
- 1 - -
-
-
-
2026-10-06
Subham Pal
New
[nf-next,v2,1/2] netfilter: nf_conntrack_h323: do not bypass NAT helpers when tuple source matches …
netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode
- 1 - -
-
-
-
2026-10-06
Subham Pal
New
[v6,nf-next,3/3] selftests: netfilter: ipvs: add per-service secure_tcp test
ipvs: add per-service secure_tcp
- - - -
-
-
-
2026-10-05
Adriano Cordova
New
[v6,nf-next,2/3] ipvs: tcp: enable per-connection secure_tcp in state machine
ipvs: add per-service secure_tcp
- - - -
-
-
-
2026-10-05
Adriano Cordova
New
[v6,nf-next,1/3] ipvs: add flags for per-service secure TCP state table
ipvs: add per-service secure_tcp
- - - -
-
-
-
2026-10-05
Adriano Cordova
New
[nf-next,v2] netfilter: nft_synproxy: only handle pure SYN and ACK packets
[nf-next,v2] netfilter: nft_synproxy: only handle pure SYN and ACK packets
- - 1 -
-
-
-
2026-10-05
Nguyen Ngoc Thang
New
[nf,v6,3/3] ipvs: reject FTP control ports as data ports
ipvs: avoid stack overflow from recursive connection expiration
- 1 - -
-
-
-
2026-10-05
zihan xi
New
[nf,v6,2/3] ipvs: avoid stack overflow from recursive connection expiration
ipvs: avoid stack overflow from recursive connection expiration
- 1 - -
-
-
-
2026-10-05
zihan xi
New
[nf,v6,1/3] ipvs: fix problems during connection deletion
ipvs: avoid stack overflow from recursive connection expiration
- 1 - -
-
-
-
2026-10-05
zihan xi
New
[nf] netfilter: flowtable: set on NF_FLOW_HW once flow has been offloaded
[nf] netfilter: flowtable: set on NF_FLOW_HW once flow has been offloaded
- 1 - -
-
-
-
2026-10-04
Pablo Neira Ayuso
New
[nf,v2,2/2] netfilter: br_netfilter: clear stale VLAN tag on refragmented packets
netfilter: preserve bridge egress VLAN tags
- 2 - -
-
-
-
2026-10-04
Andrea Parri
New
[nf,v2,1/2] netfilter: br_netfilter: restore VLAN tag on refragmented IPv6 packets
netfilter: preserve bridge egress VLAN tags
- 1 - -
-
-
-
2026-10-04
Andrea Parri
New
[nf-next,v3,3/3] selftests: netfilter: nft_flowtable.sh: check the priority a flow carries
netfilter: flowtable: carry a priority into the offload
- - - -
-
-
-
2026-10-04
Julius Bairaktaris
New
[nf-next,v3,2/3] netfilter: flowtable: carry a priority into the offload
netfilter: flowtable: carry a priority into the offload
- - - -
-
-
-
2026-10-04
Julius Bairaktaris
New
[nf-next,v3,1/3] net/mlx5e: Ignore FLOW_ACTION_PRIORITY on flowtable offload
netfilter: flowtable: carry a priority into the offload
- - - -
-
-
-
2026-10-04
Julius Bairaktaris
New
[nf-next,v2,4/4] selftests: netfilter: cover a TCP flow whose reply is never seen
netfilter: offload a TCP flow whose reply is never seen
- - - -
-
-
-
2026-10-04
Julius Bairaktaris
New
[nf-next,v2,3/4] netfilter: nft_flow_offload: offload a TCP flow that has no reply
netfilter: offload a TCP flow whose reply is never seen
- - - -
-
-
-
2026-10-04
Julius Bairaktaris
New
[nf-next,v2,2/4] netfilter: flowtable: promote a flow offloaded in one direction only
netfilter: offload a TCP flow whose reply is never seen
- - - -
-
-
-
2026-10-04
Julius Bairaktaris
New
[nf-next,v2,1/4] netfilter: conntrack: pick up a TCP flow whose SYN was never answered
netfilter: offload a TCP flow whose reply is never seen
- - - -
-
-
-
2026-10-04
Julius Bairaktaris
New
[nf-next,3/3] selftests: netfilter: nft_flowtable.sh: check upper device counters
netfilter: flowtable: update upper device stats in the fast path
- - - -
-
-
-
2026-10-04
Julius Bairaktaris
New
[nf-next,2/3] netfilter: flowtable: update upper device stats in the fast path
netfilter: flowtable: update upper device stats in the fast path
- - - -
-
-
-
2026-10-04
Julius Bairaktaris
New
[nf-next,1/3] 8021q: add vlan_dev_sw_netstats_rx_add() and vlan_dev_sw_netstats_tx_add()
netfilter: flowtable: update upper device stats in the fast path
- - - -
-
-
-
2026-10-04
Julius Bairaktaris
New
[nf-next,v6,2/2] selftests: netfilter: nft_flowtable.sh: roam a host between two bridge ports
netfilter: flowtable: tear down bridged flows on layer 2 roaming
- - - -
-
-
-
2026-10-04
Julius Bairaktaris
New
[nf-next,v6,1/2] netfilter: flowtable: tear down direct xmit flows when the fdb entry moves
netfilter: flowtable: tear down bridged flows on layer 2 roaming
- - - -
-
-
-
2026-10-04
Julius Bairaktaris
New
[nf] netfilter: nft_synproxy: only handle pure SYN and ACK packets
[nf] netfilter: nft_synproxy: only handle pure SYN and ACK packets
- 1 - -
-
-
-
2026-10-04
Nguyen Ngoc Thang
New
[2/2,nf-next] netfilter: nft_exthdr: avoid 60 bytes stack buffer in TCP option mangling
[1/2,nf-next] netfilter: nft_exthdr: remove redundant op parsing in tcp_set_init
- - - -
-
-
-
2026-10-04
Fernando Fernandez Mancera
New
[1/2,nf-next] netfilter: nft_exthdr: remove redundant op parsing in tcp_set_init
[1/2,nf-next] netfilter: nft_exthdr: remove redundant op parsing in tcp_set_init
- - - -
-
-
-
2026-10-04
Fernando Fernandez Mancera
New
[nf] ipvs: do not create conns from packets with port 0
[nf] ipvs: do not create conns from packets with port 0
- 1 - -
-
-
-
2026-10-03
Julian Anastasov
New
[nf-next] netfilter: nf_nat: replace u_int16_t with u16
[nf-next] netfilter: nf_nat: replace u_int16_t with u16
- - - -
-
-
-
2026-10-02
Carlos Grillet
New
[v2,net] netfilter: conntrack: reject nested ctnetlink master chains
[v2,net] netfilter: conntrack: reject nested ctnetlink master chains
- 1 1 -
-
-
-
2026-10-02
Daehyeon Ko
New
[iptables,3/3] xshared: fix crash when -4/-6 follows a restore command
[iptables,1/3] extensions: libxt_conntrack: Fix inverted ctstate translation
- - - -
-
-
-
2026-10-02
Phil Sutter
New
[iptables,2/3] extensions: libxt_conntrack: Fix for ignored ctstates in translation
[iptables,1/3] extensions: libxt_conntrack: Fix inverted ctstate translation
- - - -
-
-
-
2026-10-02
Phil Sutter
New
[iptables,1/3] extensions: libxt_conntrack: Fix inverted ctstate translation
[iptables,1/3] extensions: libxt_conntrack: Fix inverted ctstate translation
- - - -
-
-
-
2026-10-02
Phil Sutter
New
[nf-next] netfilter: nfnetlink_log: collapse both dev log blocks
[nf-next] netfilter: nfnetlink_log: collapse both dev log blocks
- - - -
-
-
-
2026-10-02
Florian Westphal
New
[nf] netfilter: flowtable: use the vlan id, not the full tci, in the tuple key
[nf] netfilter: flowtable: use the vlan id, not the full tci, in the tuple key
- 1 - -
-
-
-
2026-10-02
Shuangfeng He
New
[6.1,2/2] netfilter: nf_tables: support for adding new devices to an existing netdev chain
[6.1,1/2] netfilter: nf_tables: allow to create netdev chain without device
- - - -
-
-
-
2026-10-02
Ma Xinmeng
New
[6.1,1/2] netfilter: nf_tables: allow to create netdev chain without device
[6.1,1/2] netfilter: nf_tables: allow to create netdev chain without device
- - - -
-
-
-
2026-10-02
Ma Xinmeng
New
[net] netfilter: conntrack: avoid recursive master destruction
[net] netfilter: conntrack: avoid recursive master destruction
- 1 - -
-
-
-
2026-10-01
Daehyeon Ko
New
[nf-next,2/2] netfilter: add nf_sk_to_full_sk helper and use it
netfilter: do not assume skb->sk is inet sk
- - - -
-
-
-
2026-10-01
Florian Westphal
New
[nf-next,1/2] netfilter: add nf_skb_sk helper and use it
netfilter: do not assume skb->sk is inet sk
- - - -
-
-
-
2026-10-01
Florian Westphal
New
[6.1] netfilter: nf_tables: fix UAF in nf_tables_netdev_event walker
[6.1] netfilter: nf_tables: fix UAF in nf_tables_netdev_event walker
- - - -
-
-
-
2026-10-01
Ma Xinmeng
New
[12/16,net-next,v3] netfilter: ipv4: guard ip_route_me_harder() with CONFIG_IPV4
[01/16,net-next,v3] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack
- - - -
-
-
-
2026-09-30
Fernando Fernandez Mancera
New
[01/16,net-next,v3] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack
[01/16,net-next,v3] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack
1 - - -
-
-
-
2026-09-30
Fernando Fernandez Mancera
New
[net-next,12/12] net: bridge: fdb: avoid VLAN lookups in unicast forwarding
Untitled series #525925
- - 1 -
-
-
-
2026-09-30
Nikolay Aleksandrov
New
[net] ipvs: prevent LBLCR destination leak after entry expiry
[net] ipvs: prevent LBLCR destination leak after entry expiry
- 1 - -
-
-
-
2026-09-29
sung byeongchan
New
[nf-next] netfilter: nf_tables: switch chain_types array to rcu
[nf-next] netfilter: nf_tables: switch chain_types array to rcu
- - - -
-
-
-
2026-09-29
Florian Westphal
New
[nft] doc: add MPTCP subtypes documentation to man page
[nft] doc: add MPTCP subtypes documentation to man page
- - - -
-
-
-
2026-09-29
Fernando Fernandez Mancera
New
[nf-next] netfilter: conntrack: fix unlikely UaF in gc worker
[nf-next] netfilter: conntrack: fix unlikely UaF in gc worker
- 1 - -
-
-
-
2026-09-29
Florian Westphal
New
[nf,v5,1/1] netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns
netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns
- 2 - -
-
-
-
2026-09-29
zihan xi
New
[nf,v2,2/2] ipvs: fix buffer overflow when sending sync messages
ipvs: read conn fields during sync atomically
- 1 - -
-
-
-
2026-09-29
Julian Anastasov
New
[nf,v2,1/2] ipvs: update flags and seqs in backup server under lock
ipvs: read conn fields during sync atomically
- 1 - -
-
-
-
2026-09-29
Julian Anastasov
New
[net] netfilter: nf_conntrack_reasm: avoid truncating header offset
[net] netfilter: nf_conntrack_reasm: avoid truncating header offset
- 1 - -
-
-
-
2026-09-29
sung byeongchan
New
[nf-next,v5,4/4] netfilter: nf_conntrack_sip: use shared helper parsers
netfilter: conntrack: shared port parser for helpers
- - - -
-
-
-
2026-09-28
Rahul Chandelkar
New
[nf-next,v5,3/4] netfilter: nf_conntrack_amanda: use nf_ct_helper_parse_port()
netfilter: conntrack: shared port parser for helpers
- 1 - -
-
-
-
2026-09-28
Rahul Chandelkar
New
[12/16,net-next,v2] netfilter: ipv4: guard ip_route_me_harder() with CONFIG_IPV4
[01/16,net-next,v2] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack
- - - -
-
-
-
2026-09-28
Fernando Fernandez Mancera
New
[01/16,net-next,v2] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack
[01/16,net-next,v2] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack
1 - - -
-
-
-
2026-09-28
Fernando Fernandez Mancera
New
[nf-next,v2,2/2] selftests: netfilter: nft_queue: check the scope of the hook drop flush
[nf-next,v2,1/2] netfilter: nf_queue: limit the hook drop flush to the unregistered hook point
- - - -
-
-
-
2026-09-28
Antonio Ojea
pablo
New
[nf-next,v2,1/2] netfilter: nf_queue: limit the hook drop flush to the unregistered hook point
[nf-next,v2,1/2] netfilter: nf_queue: limit the hook drop flush to the unregistered hook point
- - - -
-
-
-
2026-09-28
Antonio Ojea
pablo
New
[nf-next,v5,2/4] netfilter: nf_conntrack_irc: use nf_ct_helper_parse_port()
netfilter: conntrack: shared port parser for helpers
- 1 - -
-
-
-
2026-09-28
Rahul Chandelkar
New
[nf-next,v5,1/4] netfilter: conntrack: add shared uint and port parsers for helpers
netfilter: conntrack: shared port parser for helpers
- - - -
-
-
-
2026-09-28
Rahul Chandelkar
New
[nf] netfilter: br_netfilter: restore VLAN tag on refragmented IPv6 packets
[nf] netfilter: br_netfilter: restore VLAN tag on refragmented IPv6 packets
- 1 - -
-
-
-
2026-09-28
Andrea Parri
New
[net,v4] net: cap skb->queue_mapping when the tx queue is picked
[net,v4] net: cap skb->queue_mapping when the tx queue is picked
- 1 - 1
-
-
-
2026-09-28
Jamal Hadi Salim
New
netfilter: ebtables: ebt_802_3: drop short frames before the match reads LLC
netfilter: ebtables: ebt_802_3: drop short frames before the match reads LLC
- 1 1 -
-
-
-
2026-09-28
Guo Zihao
New
[net,02/11] ipvs: fix buffer overflow when sending sync messages
[net,01/11] netfilter: ipset: do not update comments from kernel-side adds
- 1 - -
-
-
-
2026-09-27
Pablo Neira Ayuso
New
[net,v2] netfilter: flowtable: flush delete work after final GC
[net,v2] netfilter: flowtable: flush delete work after final GC
- 1 - -
-
-
-
2026-09-27
Chengfeng Ye
New
[net] netfilter: nf_tables: serialize offload stats with callback unbind
[net] netfilter: nf_tables: serialize offload stats with callback unbind
- 1 - -
-
-
-
2026-09-27
Chengfeng Ye
New
[net] ipvs: fix protocol data lifetime during namespace teardown
[net] ipvs: fix protocol data lifetime during namespace teardown
1 1 - -
-
-
-
2026-09-27
Chengfeng Ye
New
[nf,v4,1/1] netfilter: x_tables: avoid holding mutex over faultable user copies
netfilter: x_tables: avoid holding mutex over faultable user copies
- 1 - -
-
-
-
2026-09-27
zihan xi
New
[nf] netfilter: ip6t_SYNPROXY: check TCP header before verifying checksum
[nf] netfilter: ip6t_SYNPROXY: check TCP header before verifying checksum
- 1 - -
-
-
-
2026-09-26
Palla Raghunath
New
netfilter: conntrack: wait for RCU readers before freeing the hash
netfilter: conntrack: wait for RCU readers before freeing the hash
- 1 - -
-
-
-
2026-09-26
Chengfeng Ye
New
[net] ipvs: Defer application parent freeing until after RCU readers
[net] ipvs: Defer application parent freeing until after RCU readers
1 1 - -
-
-
-
2026-09-26
Chengfeng Ye
New
[nf-next,2/2] selftests: netfilter: nft_queue: check the scope of the hook drop flush
[nf-next,1/2] netfilter: nf_queue: limit the hook drop flush to the unregistered hook point
- - - -
-
-
-
2026-09-26
Antonio Ojea
New
[nf-next,1/2] netfilter: nf_queue: limit the hook drop flush to the unregistered hook point
[nf-next,1/2] netfilter: nf_queue: limit the hook drop flush to the unregistered hook point
- - - -
-
-
-
2026-09-26
Antonio Ojea
New
[nf,v4,1/1] netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns
netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns
- 3 - -
-
-
-
2026-09-26
zihan xi
New
[nf,v2,1/1] ipvs: wait grace period while reusing dest from trash
ipvs: wait grace period while reusing dest from trash
- 1 - -
-
-
-
2026-09-25
Ren Wei
New
[nf,v5,3/3] ipvs: reject FTP control ports as data ports
ipvs: avoid stack overflow from recursive connection expiration
- 1 - -
-
-
-
2026-09-25
zihan xi
New
[nf,v5,2/3] ipvs: avoid stack overflow from recursive connection expiration
ipvs: avoid stack overflow from recursive connection expiration
- 1 - -
-
-
-
2026-09-25
zihan xi
New
«
1
2
3
4
…
365
366
»