Show patches with: Archived = No       |   31938 patches
« 1 2 3 4 … 319 320 »
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
[nf-next,v4,2/4] netfilter: nf_conntrack_irc: use nf_ct_helper_parse_port() netfilter: conntrack: shared port parser for helpers - 1 - - --- 2026-09-23 Rahul Chandelkar Changes Requested
[v2,nf-next] netfilter: conntrack: add and use nf_ct_get_real() [v2,nf-next] netfilter: conntrack: add and use nf_ct_get_real() - - - - --- 2026-09-23 Florian Westphal New
[nf-next,v4,1/4] netfilter: conntrack: add shared uint and port parsers for helpers netfilter: conntrack: shared port parser for helpers - - - - --- 2026-09-23 Rahul Chandelkar Changes Requested
[nf,v3] netfilter: flowtable: generalize pending status bit [nf,v3] netfilter: flowtable: generalize pending status bit - 1 - - --- 2026-09-23 Pablo Neira Ayuso Changes Requested
[nf,v4,3/3] ipvs: reject FTP control ports as data ports ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-23 zihan xi Changes Requested
[nf,v4,2/3] ipvs: avoid stack overflow from recursive connection expiration ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-23 zihan xi Changes Requested
[nf,v4,1/3] ipvs: wait the running timer cb on conn deletion ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-23 zihan xi Changes Requested
[net,2/2] netfilter: nf_conntrack_h323: check extension bitmap before decoding components netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode - 1 - - --- 2026-09-23 Subham Pal New
[net,1/2] netfilter: nf_conntrack_h323: do not bypass NAT helpers when tuple source matches reply d… netfilter: nf_conntrack_h323: fixes for NAT bypass and ASN.1 decode - 1 - - --- 2026-09-23 Subham Pal New
[nf] netfilter: bpf: reject invalid NAT manipulation types [nf] netfilter: bpf: reject invalid NAT manipulation types - 1 - - --- 2026-09-22 Fernando Fernandez Mancera Accepted
[nf,1/1] netfilter: ecache: bound destroy event redelivery netfilter: ecache: bound destroy event redelivery - 1 - - --- 2026-09-22 Ren Wei Not Applicable
[nf-next] netfilter: nft_nat: use the right enum members for nat type switch [nf-next] netfilter: nft_nat: use the right enum members for nat type switch 1 1 - - --- 2026-09-22 Fernando Fernandez Mancera New
[nf,v3,1/1] netfilter: nf_dup: disable duplication in user namespaces netfilter: nf_dup: disable duplication in user namespaces - 1 - - --- 2026-09-22 zihan xi Changes Requested
[nf,v2] netfilter: nft_reject: prevent unbounded recursion in output hooks [nf,v2] netfilter: nft_reject: prevent unbounded recursion in output hooks - 1 - - --- 2026-09-22 Fernando Fernandez Mancera Changes Requested
ipvs: skip committing sync_threshold when proc_dointvec fails ipvs: skip committing sync_threshold when proc_dointvec fails 1 - - - --- 2026-09-22 Joel Granados New
[v3] netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets [v3] netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets - 1 - - --- 2026-09-22 lvjunyu New
[net,v6,2/2] ip: reject partial checksums covering network headers net: prevent partial checksums from modifying network headers - 4 - - --- 2026-09-22 Paulos Yibelo New
[net,v6,1/2] net: validate virtio checksum start after network header net: prevent partial checksums from modifying network headers - 2 - - --- 2026-09-22 Paulos Yibelo New
[nf] netfilter: nft_reject: prevent unbounded recursion in output hooks [nf] netfilter: nft_reject: prevent unbounded recursion in output hooks - 1 - - --- 2026-09-21 Fernando Fernandez Mancera Changes Requested
[v5,nf-next,3/3] selftests: netfilter: ipvs: add per-service secure_tcp test ipvs: add per-service secure_tcp - - 1 - --- 2026-09-21 Adriano Cordova New
[v5,nf-next,2/3] ipvs: tcp: enable per-connection secure_tcp in state machine ipvs: add per-service secure_tcp - - - - --- 2026-09-21 Adriano Cordova New
[v5,nf-next,1/3] ipvs: add flags for per-service secure TCP state table ipvs: add per-service secure_tcp - - - - --- 2026-09-21 Adriano Cordova New
[net,6/6] net/sched: act_ct: fix helper UAF due to extensions realloc ovs, net/sched: fixes for UAF after conntrack extension realloc - 1 3 - --- 2026-09-21 Ilya Maximets Awaiting Upstream
[net,5/6] net/sched: act_ct: remove 'add_helper' dead code ovs, net/sched: fixes for UAF after conntrack extension realloc - 1 3 - --- 2026-09-21 Ilya Maximets Awaiting Upstream
[net,4/6] net/sched: act_ct: avoid modifying shared unconfirmed ct entry ovs, net/sched: fixes for UAF after conntrack extension realloc - 1 3 - --- 2026-09-21 Ilya Maximets Awaiting Upstream
[net,3/6] net: openvswitch: conntrack: fix helper UAF due to extensions realloc ovs, net/sched: fixes for UAF after conntrack extension realloc - 1 1 - --- 2026-09-21 Ilya Maximets Awaiting Upstream
[net,2/6] net: openvswitch: conntrack: remove 'add_helper' dead code ovs, net/sched: fixes for UAF after conntrack extension realloc - 1 1 - --- 2026-09-21 Ilya Maximets Awaiting Upstream
[net,1/6] net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry ovs, net/sched: fixes for UAF after conntrack extension realloc - 1 1 - --- 2026-09-21 Ilya Maximets Awaiting Upstream
[v2] netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets [v2] netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets - 1 - - --- 2026-09-21 lvjunyu New
[nf] netfilter: nft_set_rbtree: skip transaction elements during GC [nf] netfilter: nft_set_rbtree: skip transaction elements during GC - 1 - - --- 2026-09-21 Weiming Shi Accepted
[nf,v3,1/1] netfilter: x_tables: avoid holding mutex over faultable user copies netfilter: x_tables: avoid holding mutex over faultable user copies - 1 - - --- 2026-09-20 zihan xi Awaiting Upstream
[nf,v3,2/2] ipvs: reject FTP control ports as data ports ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-20 zihan xi Changes Requested
[nf,v3,1/2] ipvs: avoid stack overflow from recursive connection expiration ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-20 zihan xi Changes Requested
netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets - 1 - - --- 2026-09-20 lvjunyu Changes Requested
[v4,nf-next,3/3] selftests: netfilter: ipvs: add per-service secure_tcp test ipvs: add per-service secure_tcp - - - - --- 2026-09-20 Adriano Cordova Changes Requested
[v4,nf-next,2/3] ipvs: tcp: enable per-connection secure_tcp in state machine ipvs: add per-service secure_tcp - - - - --- 2026-09-20 Adriano Cordova Changes Requested
[v4,nf-next,1/3] ipvs: add flags for per-service secure TCP state table ipvs: add per-service secure_tcp - - - - --- 2026-09-20 Adriano Cordova Changes Requested
netfilter: nf_nat: fix unsigned range_size underflow for ICMP and GRE when max < min netfilter: nf_nat: fix unsigned range_size underflow for ICMP and GRE when max < min - 1 - - --- 2026-09-19 Hui Peng New
netfilter: nfnetlink_log: fix config error handling, SIT headroom OOB read, and nlmsg rollback netfilter: nfnetlink_log: fix config error handling, SIT headroom OOB read, and nlmsg rollback - 1 - - --- 2026-09-19 Hui Peng New
[v2,nf,2/2] ipvs: filter some flags received in the backup server ipvs: filter some connection flags - 1 - - --- 2026-09-19 Julian Anastasov Accepted
[v2,nf,1/2] ipvs: do not create invisible templates ipvs: filter some connection flags - 1 - - --- 2026-09-19 Julian Anastasov Accepted
[v2] netfilter: nf_tables: defer object destruction on abort past commit_mutex [v2] netfilter: nf_tables: defer object destruction on abort past commit_mutex - - - - --- 2026-09-19 Nguyen Ngoc Thang New
netfilter: nf_tables: defer object destruction on abort past commit_mutex netfilter: nf_tables: defer object destruction on abort past commit_mutex - - - - --- 2026-09-19 Nguyen Ngoc Thang Superseded
[nf-next] selftests: netfilter: nft_queue.sh: only queue icmp echo request/reply [nf-next] selftests: netfilter: nft_queue.sh: only queue icmp echo request/reply - - 1 - --- 2026-09-18 Jakub Kicinski Accepted
[v3,nf,6/6] netfilter: nft_ct: validate timeout object protocol netfilter: harden conntrack vs ingress pipeline rewrites - 1 - - --- 2026-09-18 Florian Westphal New
[v3,nf,5/6] netfilter: nf_conntrack: harden helper invocation with tuple revalidation netfilter: harden conntrack vs ingress pipeline rewrites - 1 - - --- 2026-09-18 Florian Westphal New
[v3,nf,4/6] netfilter: conntrack: replace open-coded helper invocation netfilter: harden conntrack vs ingress pipeline rewrites - 1 - - --- 2026-09-18 Florian Westphal New
[v3,nf,3/6] netfilter: nf_conntrack: verify L4 protocol before calling helper netfilter: harden conntrack vs ingress pipeline rewrites - 1 - - --- 2026-09-18 Florian Westphal New
[v3,nf,2/6] netfilter: nf_conntrack: refactor helper call logic in nf_confirm() netfilter: harden conntrack vs ingress pipeline rewrites - 1 - - --- 2026-09-18 Florian Westphal New
[v3,nf,1/6] netfilter: nf_conntrack: validate skb->_nfct and packet headers netfilter: harden conntrack vs ingress pipeline rewrites - 1 - - --- 2026-09-18 Florian Westphal New
[nf,v2] netfilter: flowtable: generalize pending status bit [nf,v2] netfilter: flowtable: generalize pending status bit - 1 - - --- 2026-09-18 Pablo Neira Ayuso Changes Requested
[nf] netfilter: flowtable: generalize pending status bit [nf] netfilter: flowtable: generalize pending status bit - 1 - - --- 2026-09-18 Pablo Neira Ayuso Changes Requested
[net,8/8] netfilter: nf_tables: skip expired catchall elements on insert and delete [net,1/8] netfilter: flowtable: publish HW_DEAD after worker is done - 1 - - --- 2026-09-18 Pablo Neira Ayuso Accepted
[net,7/8] netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name [net,1/8] netfilter: flowtable: publish HW_DEAD after worker is done - 1 - - --- 2026-09-18 Pablo Neira Ayuso Accepted
[net,6/8] ipvs: revalidate ihl before icmp_send [net,1/8] netfilter: flowtable: publish HW_DEAD after worker is done - 1 - - --- 2026-09-18 Pablo Neira Ayuso Accepted
[net,5/8] netfilter: nft_synproxy: use the family-aware checksum helper [net,1/8] netfilter: flowtable: publish HW_DEAD after worker is done - 1 - - --- 2026-09-18 Pablo Neira Ayuso Accepted
[net,4/8] netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read [net,1/8] netfilter: flowtable: publish HW_DEAD after worker is done - 1 - - --- 2026-09-18 Pablo Neira Ayuso Accepted
[net,3/8] netfilter: ip6t_rpfilter: reject routes without inet6_dev [net,1/8] netfilter: flowtable: publish HW_DEAD after worker is done - 1 - - --- 2026-09-18 Pablo Neira Ayuso Accepted
[net,2/8] netfilter: nfnetlink_queue: hold nfnl mutex in event notifier [net,1/8] netfilter: flowtable: publish HW_DEAD after worker is done - 1 - - --- 2026-09-18 Pablo Neira Ayuso Accepted
[net,1/8] netfilter: flowtable: publish HW_DEAD after worker is done [net,1/8] netfilter: flowtable: publish HW_DEAD after worker is done - 1 - - --- 2026-09-18 Pablo Neira Ayuso Accepted
[net,v2,0/8] Netfilter/IPVS fixes for net - - - - --- 2026-09-18 Pablo Neira Ayuso New
[nf,1/1] netfilter: nf_ip6_checksum: validate checksum offset netfilter: nf_ip6_checksum: validate checksum offset - 2 - - --- 2026-09-18 Ren Wei Not Applicable
[nf-next,v5] netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers [nf-next,v5] netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers - - - - --- 2026-09-18 Zhixing Chen New
[nft] Fix for warnings when compiling for 32bit arch [nft] Fix for warnings when compiling for 32bit arch - - - - --- 2026-09-17 Phil Sutter New
[nft,2/2] doc: nft.8: Document caveats when mixing clients [nft,1/2] doc: nft.8: Describe nftables transactions and their limitations - - - - --- 2026-09-17 Phil Sutter New
[nft,1/2] doc: nft.8: Describe nftables transactions and their limitations [nft,1/2] doc: nft.8: Describe nftables transactions and their limitations - - - - --- 2026-09-17 Phil Sutter New
[nf-next,v3,6/6] net: netfilter: nf_flow_table: unify tunnel push for IPv4 and IPv6 net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload - - - - --- 2026-09-17 Lorenzo Bianconi Accepted
[nf-next,v3,5/6] net: netfilter: nf_flow_table: refactor MTU check for tunnel offload net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload - - - - --- 2026-09-17 Lorenzo Bianconi Accepted
[nf-next,v3,4/6] net: netfilter: add encap_proto to flow_offload_tunnel net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload - - - - --- 2026-09-17 Lorenzo Bianconi Accepted
[nf-next,v3,3/6] net: netfilter: nf_flow_table: populate tunnel tuple regardless of inner protocol net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload - - - - --- 2026-09-17 Lorenzo Bianconi Accepted
[nf-next,v3,2/6] net: netfilter: nf_flow_table: set inner protocol when popping tunnel header net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload - - - - --- 2026-09-17 Lorenzo Bianconi Accepted
[nf-next,v3,1/6] net: netfilter: nf_flow_table: recognize IPv4/IPv6 in tunnel proto matching net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload - - - - --- 2026-09-17 Lorenzo Bianconi Accepted
[net] selftests: net: update netfilter netlink config [net] selftests: net: update netfilter netlink config 2 1 1 - --- 2026-09-17 Hangbin Liu Awaiting Upstream
[net,09/10] net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check [net,01/10] netfilter: flowtable: publish HW_DEAD after worker is done - 2 - - --- 2026-09-16 Pablo Neira Ayuso Accepted
[nf,v2] netfilter: nfnetlink_queue: hash queue instance by portid too [nf,v2] netfilter: nfnetlink_queue: hash queue instance by portid too - 1 - - --- 2026-09-16 Pablo Neira Ayuso Changes Requested
[nf-next] netfilter: nfnetlink_queue: hash queue instance by portid too [nf-next] netfilter: nfnetlink_queue: hash queue instance by portid too - 1 - - --- 2026-09-16 Pablo Neira Ayuso Changes Requested
netfilter: nf_dup_netdev: Fix net_device reference leak in nft_fwd_dup_netdev_offload() netfilter: nf_dup_netdev: Fix net_device reference leak in nft_fwd_dup_netdev_offload() - 1 - - --- 2026-09-16 Haotian Zhang Not Applicable
[v2,2/4] ipvs: stamp per-service secure_tcp on connections ipvs: add per-service secure_tcp - - - - --- 2026-09-15 Adriano Cordova Changes Requested
[v2,1/4] ipvs: add flags for per-service secure TCP state table ipvs: add per-service secure_tcp - - - - --- 2026-09-15 Adriano Cordova Changes Requested
[nft,2/2] remove EXPR_SET_ELEM, replace it by struct set_elem [nft,1/2] expression: assert if clone interface is undefine - - - - --- 2026-09-14 Pablo Neira Ayuso Accepted
[nft,1/2] expression: assert if clone interface is undefine [nft,1/2] expression: assert if clone interface is undefine - - - - --- 2026-09-14 Pablo Neira Ayuso Accepted
[nf,v2] net: update dev_fill_forward_path() to handle mac80211 special case [nf,v2] net: update dev_fill_forward_path() to handle mac80211 special case - 1 - - --- 2026-09-14 Pablo Neira Ayuso Changes Requested
[nf,v3] netfilter: nf_tables: skip expired catchall elements on insert and delete [nf,v3] netfilter: nf_tables: skip expired catchall elements on insert and delete - 1 - - --- 2026-09-14 Aohan Mei Accepted
[nf-next,v5,3/3] selftests: netfilter: nft_flowtable.sh: roam a host between two bridge ports flow offload teardown when layer 2 roaming - - - - --- 2026-09-14 Julius Bairaktaris Superseded
[nf-next,v5,2/3] netfilter: flowtable: teardown direct xmit flows when the fdb entry moves flow offload teardown when layer 2 roaming - - - - --- 2026-09-14 Julius Bairaktaris Superseded
[nf-next,v5,1/3] netfilter: flow: Add bridge_vid member flow offload teardown when layer 2 roaming - - - - --- 2026-09-14 Julius Bairaktaris Superseded
[net,4/4] netfilter: flowtable: hold reference on ct until flow is released [net,1/4] netfilter: nft_nat: fully initialise new_addr in netmap setup - 1 - - --- 2026-09-13 Pablo Neira Ayuso Accepted
[net,3/4] netfilter: nf_nat: unregister and release hooks on error [net,1/4] netfilter: nft_nat: fully initialise new_addr in netmap setup - 1 - - --- 2026-09-13 Pablo Neira Ayuso Accepted
[net,2/4] netfilter: nf_tables: fix device name and prefix match in hook lookup [net,1/4] netfilter: nft_nat: fully initialise new_addr in netmap setup - 1 - - --- 2026-09-13 Pablo Neira Ayuso Accepted
[net,1/4] netfilter: nft_nat: fully initialise new_addr in netmap setup [net,1/4] netfilter: nft_nat: fully initialise new_addr in netmap setup - 1 - - --- 2026-09-13 Pablo Neira Ayuso Accepted
[net,v2,0/4,RESEND] Netfilter fixes for net - - - - --- 2026-09-13 Pablo Neira Ayuso Accepted
[nf,v2,2/2] netfilter: flowtable: advertise the vlan match in used_keys [nf] netfilter: flowtable: advertise the vlan match in used_keys - 1 - - --- 2026-09-13 Julius Bairaktaris New
[nf,v2,1/2] netfilter: flowtable: fill the vlan key from the outermost tag only netfilter: flowtable: correct and advertise the vlan match - 1 - - --- 2026-09-13 Julius Bairaktaris New
[net,1/1] ipvs: bound twos scheduler destination walks ipvs: bound twos scheduler destination walks - 1 - - --- 2026-09-12 Ren Wei New
[net,v2] net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check [net,v2] net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check - 2 1 - --- 2026-09-12 Farhad Alemi Accepted
[nf,1/1] ipvs: avoid stack overflow from recursive connection expiration ipvs: avoid stack overflow from recursive connection expiration - 1 - - --- 2026-09-12 zihan xi New
[4/4] selftests: netfilter: ipvs: add per-service secure_tcp test ipvs: add per-service secure_tcp - - - - --- 2026-09-12 Adriano Cordova Changes Requested
[3/4] ipvs: tcp: enable per-connection secure_tcp in state machine ipvs: add per-service secure_tcp - - - - --- 2026-09-12 Adriano Cordova Changes Requested
[2/4] ipvs: stamp per-service secure_tcp on new connections ipvs: add per-service secure_tcp - - - - --- 2026-09-12 Adriano Cordova Changes Requested
[1/4] ipvs: add flags for per-service secure TCP state table ipvs: add per-service secure_tcp - - - - --- 2026-09-12 Adriano Cordova Changes Requested
« 1 2 3 4 … 319 320 »