Show patches with: Archived = No       |   31953 patches
« 1 2 3 4 … 319 320 »
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
[nf,v9,1/1] netfilter: nf_dup: preserve guard across NFQUEUE reinjection netfilter: nf_dup: preserve guard across NFQUEUE reinjection - 1 - - --- 2026-10-16 zihan xi New
selinux: don't label bridged packets in selinux_ip_forward() selinux: don't label bridged packets in selinux_ip_forward() 1 1 - - --- 2026-10-16 Joas Antonio dos Santos New
[nf-next,v2] netfilter: flowtable: do not hw offload flows in teardown state [nf-next,v2] netfilter: flowtable: do not hw offload flows in teardown state - - - - --- 2026-10-16 Pablo Neira Ayuso New
[nf-next] netfilter: flowtable: do not hw offload flows in teardown state [nf-next] netfilter: flowtable: do not hw offload flows in teardown state - - - - --- 2026-10-16 Pablo Neira Ayuso Not Applicable
extensions: ebt_string: Remove spurious inverse check for --string-icase extensions: ebt_string: Remove spurious inverse check for --string-icase - - - - --- 2026-10-16 YuPeng New
[nf-next] netfilter: nft_limit: reject configurations that cause integer overflow [nf-next] netfilter: nft_limit: reject configurations that cause integer overflow - - - - --- 2026-10-15 SaifAllah benMassaoud New
[nf-next,2/2] netfilter: flowtable: move hardware offload refresh to GC worker [nf-next,1/2] netfilter: flowtable: consolidate unsupported hardware offload check - 1 - - --- 2026-10-15 Pablo Neira Ayuso Not Applicable
[nf-next,1/2] netfilter: flowtable: consolidate unsupported hardware offload check [nf-next,1/2] netfilter: flowtable: consolidate unsupported hardware offload check - 1 - - --- 2026-10-15 Pablo Neira Ayuso Not Applicable
[nf] netfilter: flowtable: move hardware offload refresh to GC worker [nf] netfilter: flowtable: move hardware offload refresh to GC worker - 1 - - --- 2026-10-15 Pablo Neira Ayuso Not Applicable
[nf-next] netfilter: ipvs: avoid passing skb->sk to route_me_harder [nf-next] netfilter: ipvs: avoid passing skb->sk to route_me_harder - - - - --- 2026-10-15 Florian Westphal New
[net-next,v2,6/7] net: add ip4_parse() Untitled series #528117 - - 2 - --- 2026-10-15 Michael S. Tsirkin New
[5.10] netfilter: nf_tables: fix bidirectional offload regression [5.10] netfilter: nf_tables: fix bidirectional offload regression - 1 - - --- 2026-10-15 Gyokhan Kochmarla New
[nf-next,2/2] netfilter: flowtable: avoid unnecessary linearization for PPPoE [nf-next,1/2] netfilter: flowtable: use PPPoE GSO handler - - - - --- 2026-10-15 Qingfang Deng New
[nf-next,1/2] netfilter: flowtable: use PPPoE GSO handler [nf-next,1/2] netfilter: flowtable: use PPPoE GSO handler - - - - --- 2026-10-15 Qingfang Deng New
[nf,v8,3/3] netfilter: nf_dup: prevent TTL and hop-limit underflow netfilter: bound asynchronous packet duplication - 1 - - --- 2026-10-15 zihan xi New
[nf,v8,2/3] netfilter: nf_dup_netdev: bound asynchronous duplication netfilter: bound asynchronous packet duplication - 1 - - --- 2026-10-15 zihan xi New
[nf,v8,1/3] netfilter: nf_dup: preserve guard across NFQUEUE reinjection netfilter: bound asynchronous packet duplication - 1 - - --- 2026-10-15 zihan xi New
[RFC,conntrack-tools] conntrackd: StartupResync and the FTFW HELLO exchange [RFC,conntrack-tools] conntrackd: StartupResync and the FTFW HELLO exchange - - - - --- 2026-10-15 Артем Щелкунов New
[nf-next,v7,2/2] selftests: netfilter: nft_flowtable.sh: roam a host between two bridge ports netfilter: flowtable: tear down bridged flows on layer 2 roaming - - - - --- 2026-10-14 Julius Bairaktaris New
[nf-next,v7,1/2] netfilter: flowtable: tear down direct xmit flows when the fdb entry moves netfilter: flowtable: tear down bridged flows on layer 2 roaming - - - - --- 2026-10-14 Julius Bairaktaris New
[nf-next] netfilter: flowtable: teardown flow reaching bridge port on fdb updates [nf-next] netfilter: flowtable: teardown flow reaching bridge port on fdb updates - - - - --- 2026-10-14 Pablo Neira Ayuso New
[net-next,2/4] net: use ip4_parse() in receive validation Untitled series #527721 - - - - --- 2026-10-13 Michael S. Tsirkin Changes Requested
[nf] netfilter: ipset: fix double free on kernel-side delete during resize [nf] netfilter: ipset: fix double free on kernel-side delete during resize - 1 - - --- 2026-10-12 Xue Boyang New
netfilter: nf_conntrack_h323: fix NULL deref in decode_seqof() netfilter: nf_conntrack_h323: fix NULL deref in decode_seqof() - - - - --- 2026-10-12 Guanglei Zhu New
[nf-next,v3,2/2] netfilter: ebtables: ebt_802_3: fix control format test and the ni type offset [nf-next,v3,1/2] netfilter: ebtables: ebt_802_3: check the LLC fields before reading them - - - - --- 2026-10-12 Guo Zihao New
[nf-next,v3,1/2] netfilter: ebtables: ebt_802_3: check the LLC fields before reading them [nf-next,v3,1/2] netfilter: ebtables: ebt_802_3: check the LLC fields before reading them - 1 1 - --- 2026-10-12 Guo Zihao New
[net-next,15/15] netfilter: nft_exthdr: avoid 60 bytes stack buffer in TCP option mangling [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,14/15] netfilter: nft_exthdr: remove redundant op parsing in tcp_set_init [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,13/15] netfilter: add nf_sk_to_full_sk helper and use it [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,12/15] netfilter: add nf_skb_sk helper and use it [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,11/15] netfilter: nf_tables: switch chain_types array to rcu [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,10/15] netfilter: conntrack: fix unlikely UaF in gc worker [net-next,01/15] netfilter: disable br_netfilter in user namespaces - 1 - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,09/15] ipvs: fix buffer overflow when sending sync messages [net-next,01/15] netfilter: disable br_netfilter in user namespaces - 1 - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,08/15] selftests: netfilter: nft_queue.sh: only queue icmp echo request/reply [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - 1 - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,07/15] netfilter: flowtable: unify tunnel push for IPv4 and IPv6 [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,06/15] netfilter: flowtable: refactor MTU check for tunnel offload [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,05/15] netfilter: flowtable: add encap_proto to flow_offload_tunnel [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,04/15] netfilter: flowtable: populate tunnel tuple regardless of inner protocol [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,03/15] netfilter: flowtable: set inner protocol when popping tunnel header [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,02/15] netfilter: flowtable: recognize IPv4/IPv6 in tunnel proto matching [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - - - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,01/15] netfilter: disable br_netfilter in user namespaces [net-next,01/15] netfilter: disable br_netfilter in user namespaces - - 1 - --- 2026-10-11 Pablo Neira Ayuso New
[net-next,00/15] Netfilter/IPVS updates for net-next - - - - --- 2026-10-11 Pablo Neira Ayuso New
[nf,v7,1/1] netfilter: nf_dup: preserve duplication guard across NFQUEUE netfilter: nf_dup: preserve duplication guard across NFQUEUE - 2 - - --- 2026-10-11 zihan xi New
[6.1.y,v2] netfilter: nft_set_pipapo: restore cloned mapping table memcg accounting [6.1.y,v2] netfilter: nft_set_pipapo: restore cloned mapping table memcg accounting - 1 - - --- 2026-10-10 Karl Mehltretter Awaiting Upstream
[6.6.y,v2] netfilter: nft_set_pipapo: restore cloned mapping table memcg accounting [6.6.y,v2] netfilter: nft_set_pipapo: restore cloned mapping table memcg accounting - 1 - - --- 2026-10-10 Karl Mehltretter Awaiting Upstream
[nf,v2] netfilter: synproxy: check TCP header before verifying checksum [nf,v2] netfilter: synproxy: check TCP header before verifying checksum - 2 1 - --- 2026-10-09 Palla Raghunath New
[RFC,net-next] netfilter: bridge: refragment reassembled packets passed up [RFC,net-next] netfilter: bridge: refragment reassembled packets passed up - 1 - - --- 2026-10-09 Gabriel Goller New
netfilter: nf_conntrack_h323: fix NULL pointer deref in decode_seqof() netfilter: nf_conntrack_h323: fix NULL pointer deref in decode_seqof() - 2 - - --- 2026-10-09 Henry Martin Not Applicable
netfilter: xt_dccp: handle reserved options as single-byte netfilter: xt_dccp: handle reserved options as single-byte - 1 - - --- 2026-10-08 Sung Byeongchan New
[iptables] extensions: libxt_conntrack: Fail on untranslatable state match [iptables] extensions: libxt_conntrack: Fail on untranslatable state match - 1 - - --- 2026-10-08 Phil Sutter New
[nf-next,RFC] netfilter: nft_exthdr: add inner option type search for MPTCP [nf-next,RFC] netfilter: nft_exthdr: add inner option type search for MPTCP - - - - --- 2026-10-08 Fernando Fernandez Mancera New
[nf-next,v2] netfilter: nf_conntrack_sip: only honour Via: port in original direction [nf-next,v2] netfilter: nf_conntrack_sip: only honour Via: port in original direction - 1 - - --- 2026-10-08 Joas Antonio dos Santos New
[nf,v5,1/1] netfilter: x_tables: avoid holding mutex over faultable user copies netfilter: x_tables: avoid holding mutex over faultable user copies - 1 - - --- 2026-10-08 zihan xi Not Applicable
[nf,v6,1/1] netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns - 2 - - --- 2026-10-08 zihan xi New
[v3] netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets [v3] netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets - 1 - - --- 2026-10-08 lvjunyu New
[net,v2] netfilter: nf_conntrack_reasm: avoid truncating header offsets [net,v2] netfilter: nf_conntrack_reasm: avoid truncating header offsets - 1 - - --- 2026-10-08 Sung Byeongchan New
[net,v2] netfilter: ebtables: ebt_802_3: check the LLC fields before reading them [net,v2] netfilter: ebtables: ebt_802_3: check the LLC fields before reading them - 1 1 - --- 2026-10-08 Guo Zihao Changes Requested
[net] ipv4: validate checksum_start before completing checksum [net] ipv4: validate checksum_start before completing checksum - 2 1 - --- 2026-10-07 Michael S. Tsirkin Awaiting Upstream
[nf-next,v5] netfilter: flowtable: initial bridge support [nf-next,v5] netfilter: flowtable: initial bridge support - - - - --- 2026-10-07 Pablo Neira Ayuso New
[nf] netfilter: nft_set_rbtree: narrow down range completion to anonymous sets [nf] netfilter: nft_set_rbtree: narrow down range completion to anonymous sets - 1 - - --- 2026-10-07 Pablo Neira Ayuso New
[nf,v3] netfilter: nf_reject: initialize IPCB at inet ingress [nf,v3] netfilter: nf_reject: initialize IPCB at inet ingress - 1 - - --- 2026-10-07 Pablo Neira Ayuso New
netfilter: nft_set_pipapo: skip transaction elements during GC netfilter: nft_set_pipapo: skip transaction elements during GC - 1 - - --- 2026-10-07 Bui Viet Dung Not Applicable
[nf-next,v3] netfilter: ip6t_NPT: ensure skb is writable before header modification [nf-next,v3] netfilter: ip6t_NPT: ensure skb is writable before header modification - 2 - - --- 2026-10-07 Joas Antonio dos Santos New
[nf] netfilter: nf_conntrack_sip: only honour Via: port in original direction [nf] netfilter: nf_conntrack_sip: only honour Via: port in original direction - 1 - - --- 2026-10-07 Joas Antonio dos Santos New
[nf-next] netfilter: nf_conntrack: limit expectation master chain depth [nf-next] netfilter: nf_conntrack: limit expectation master chain depth - - - - --- 2026-10-07 Florian Westphal New
[net,v3] netfilter: conntrack: avoid recursive master destruction [net,v3] netfilter: conntrack: avoid recursive master destruction 1 1 - - --- 2026-10-07 Daehyeon Ko New
[nf-next] netfilter: nft_compat: restrict raw table targets/matches [nf-next] netfilter: nft_compat: restrict raw table targets/matches - 1 - - --- 2026-10-06 Florian Westphal New
[nf-next] netfilter: nft_ct: validate hook and priority for ct zone set [nf-next] netfilter: nft_ct: validate hook and priority for ct zone set - 1 - - --- 2026-10-06 Florian Westphal New
[nf-next] selftests: netfilter: fix return value in zone subtest [nf-next] selftests: netfilter: fix return value in zone subtest - 1 1 - --- 2026-10-06 Florian Westphal New
[nft,v2] doc: add MPTCP subtypes documentation to man page [nft,v2] doc: add MPTCP subtypes documentation to man page - - 1 - --- 2026-10-06 Fernando Fernandez Mancera New
[RFC,net-next] netfilter: nf_conntrack: add ct expression support for netdev egress chains [RFC,net-next] netfilter: nf_conntrack: add ct expression support for netdev egress chains - - - - --- 2026-10-06 Hari Chandrakanthan New
[nf-next,v2,2/2] netfilter: nf_conntrack_h323: check extension bitmap before decoding components netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode - 1 - - --- 2026-10-06 Subham Pal New
[nf-next,v2,1/2] netfilter: nf_conntrack_h323: do not bypass NAT helpers when tuple source matches … netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode - 1 - - --- 2026-10-06 Subham Pal New
[v6,nf-next,3/3] selftests: netfilter: ipvs: add per-service secure_tcp test ipvs: add per-service secure_tcp - - - - --- 2026-10-05 Adriano Cordova New
[v6,nf-next,2/3] ipvs: tcp: enable per-connection secure_tcp in state machine ipvs: add per-service secure_tcp - - - - --- 2026-10-05 Adriano Cordova New
[v6,nf-next,1/3] ipvs: add flags for per-service secure TCP state table ipvs: add per-service secure_tcp - - - - --- 2026-10-05 Adriano Cordova New
[nf] netfilter: nft_set_rbtree: reject expired interval ends [nf] netfilter: nft_set_rbtree: reject expired interval ends - 1 - - --- 2026-10-05 Jérémy Jean Changes Requested
[nf-next,v2] netfilter: nft_synproxy: only handle pure SYN and ACK packets [nf-next,v2] netfilter: nft_synproxy: only handle pure SYN and ACK packets - - 1 - --- 2026-10-05 Nguyen Ngoc Thang New
[nf,v6,3/3] ipvs: reject FTP control ports as data ports ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-10-05 zihan xi New
[nf,v6,2/3] ipvs: avoid stack overflow from recursive connection expiration ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-10-05 zihan xi New
[nf,v6,1/3] ipvs: fix problems during connection deletion ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-10-05 zihan xi New
[nf] netfilter: flowtable: set on NF_FLOW_HW once flow has been offloaded [nf] netfilter: flowtable: set on NF_FLOW_HW once flow has been offloaded - 1 - - --- 2026-10-04 Pablo Neira Ayuso New
[nf,v2,2/2] netfilter: br_netfilter: clear stale VLAN tag on refragmented packets netfilter: preserve bridge egress VLAN tags - 2 - - --- 2026-10-04 Andrea Parri New
[nf,v2,1/2] netfilter: br_netfilter: restore VLAN tag on refragmented IPv6 packets netfilter: preserve bridge egress VLAN tags - 1 - - --- 2026-10-04 Andrea Parri New
[nf-next,v3,3/3] selftests: netfilter: nft_flowtable.sh: check the priority a flow carries netfilter: flowtable: carry a priority into the offload - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v3,2/3] netfilter: flowtable: carry a priority into the offload netfilter: flowtable: carry a priority into the offload - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v3,1/3] net/mlx5e: Ignore FLOW_ACTION_PRIORITY on flowtable offload netfilter: flowtable: carry a priority into the offload - - 1 - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v2,4/4] selftests: netfilter: cover a TCP flow whose reply is never seen netfilter: offload a TCP flow whose reply is never seen - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v2,3/4] netfilter: nft_flow_offload: offload a TCP flow that has no reply netfilter: offload a TCP flow whose reply is never seen - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v2,2/4] netfilter: flowtable: promote a flow offloaded in one direction only netfilter: offload a TCP flow whose reply is never seen - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v2,1/4] netfilter: conntrack: pick up a TCP flow whose SYN was never answered netfilter: offload a TCP flow whose reply is never seen - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,3/3] selftests: netfilter: nft_flowtable.sh: check upper device counters netfilter: flowtable: update upper device stats in the fast path - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,2/3] netfilter: flowtable: update upper device stats in the fast path netfilter: flowtable: update upper device stats in the fast path - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,1/3] 8021q: add vlan_dev_sw_netstats_rx_add() and vlan_dev_sw_netstats_tx_add() netfilter: flowtable: update upper device stats in the fast path - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v6,2/2] selftests: netfilter: nft_flowtable.sh: roam a host between two bridge ports netfilter: flowtable: tear down bridged flows on layer 2 roaming - - - - --- 2026-10-04 Julius Bairaktaris New
[nf-next,v6,1/2] netfilter: flowtable: tear down direct xmit flows when the fdb entry moves netfilter: flowtable: tear down bridged flows on layer 2 roaming - - - - --- 2026-10-04 Julius Bairaktaris New
[nf] netfilter: nft_synproxy: only handle pure SYN and ACK packets [nf] netfilter: nft_synproxy: only handle pure SYN and ACK packets - 1 - - --- 2026-10-04 Nguyen Ngoc Thang Changes Requested
[2/2,nf-next] netfilter: nft_exthdr: avoid 60 bytes stack buffer in TCP option mangling [1/2,nf-next] netfilter: nft_exthdr: remove redundant op parsing in tcp_set_init - - - - --- 2026-10-04 Fernando Fernandez Mancera Accepted
[1/2,nf-next] netfilter: nft_exthdr: remove redundant op parsing in tcp_set_init [1/2,nf-next] netfilter: nft_exthdr: remove redundant op parsing in tcp_set_init - - - - --- 2026-10-04 Fernando Fernandez Mancera Accepted
[nf] ipvs: do not create conns from packets with port 0 [nf] ipvs: do not create conns from packets with port 0 - 1 - - --- 2026-10-03 Julian Anastasov New
« 1 2 3 4 … 319 320 »