summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2025-10-29ipvs: Defer ip_vs_ftp unregister during netns cleanupSlavin Liu1-1/+3
2025-10-29netfilter: ipset: Remove unused htable_bits in macro ahash_regionZhen Ni1-4/+4
2025-09-09netfilter: conntrack: helper: Replace -EEXIST by -EBUSYPhil Sutter1-2/+2
2025-08-28netfilter: ctnetlink: fix refcount leak on table dumpFlorian Westphal1-11/+13
2025-08-28netfilter: xt_nfacct: don't assume acct name is null-terminatedFlorian Westphal1-2/+2
2025-08-28netfilter: nf_tables: adjust lockdep assertions handlingFedor Pchelkin1-2/+2
2025-06-27netfilter: nft_socket: fix sk refcount leaksFlorian Westphal1-1/+2
2025-06-04netfilter: nf_tables: do not defer rule destruction via call_rcuFlorian Westphal1-17/+14
2025-06-04netfilter: nf_tables: wait for rcu grace period on net_device removalPablo Neira Ayuso1-7/+34
2025-06-04netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctxFlorian Westphal1-9/+6
2025-06-04netfilter: conntrack: Bound nf_conntrack sysctl writesNicolas Bouchinet1-3/+9
2025-06-04netfilter: ipset: fix region locking in hash typesJozsef Kadlecsik1-1/+1
2025-04-10netfilter: nft_exthdr: fix offset with ipv4_find_option()Alexey Kashavkin1-6/+4
2025-04-10ipvs: prevent integer overflow in do_ip_vs_get_ctl()Dan Carpenter1-4/+4
2025-04-10netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert...Kohei Enju1-0/+2
2025-01-09netfilter: Replace zero-length array with flexible-array memberGustavo A. R. Silva7-9/+9
2025-01-09netfilter: ipset: Fix for recursive locking warningPhil Sutter1-0/+3
2024-12-14netfilter: nft_set_hash: skip duplicated elements pending gc runPablo Neira Ayuso1-0/+16
2024-12-14netfilter: ipset: Hold module reference while requesting a modulePhil Sutter1-0/+5
2024-12-14netfilter: x_tables: fix LED ID check in led_tg_check()Dmitry Antipov1-1/+3
2024-12-14ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()Jinghao Jia1-3/+1
2024-12-14netfilter: ipset: add missing range check in bitmap_ip_uadtJeongjun Park1-5/+2
2024-11-08netfilter: nft_payload: sanitize offset and length before calling skb_checksum()Pablo Neira Ayuso1-0/+3
2024-11-08netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_E...Simon Horman1-5/+2
2024-11-08netfilter: nf_tables: reject expiration higher than timeoutPablo Neira Ayuso1-0/+3
2024-11-08netfilter: nf_tables: reject element expiration with no timeoutPablo Neira Ayuso1-0/+3
2024-11-08netfilter: nf_tables: elements with timeout below CONFIG_HZ never expirePablo Neira Ayuso1-1/+1
2024-09-12netfilter: nf_conncount: fix wrong variable typeYunjian Wang1-5/+3
2024-09-04netfilter: nft_counter: Synchronize nft_counter_reset() against reader.Sebastian Andrzej Siewior1-0/+5
2024-08-19netfilter: nf_tables: prefer nft_chain_validateFlorian Westphal1-101/+13
2024-08-19netfilter: nf_tables: use timestamp to check for set element timeoutPablo Neira Ayuso3-3/+12
2024-08-19netfilter: nf_tables: set element extended ACK reporting supportPablo Neira Ayuso1-4/+9
2024-08-19netfilter: ipset: Add list flush to cancel_gcAlexander Maltsev1-0/+3
2024-08-19netfilter: ctnetlink: use helper function to calculate expect IDPablo Neira Ayuso1-1/+2
2024-08-19ipvs: Avoid unnecessary calls to skb_is_gso_sctpIsmael Luceno1-2/+2
2024-07-05netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registersPablo Neira Ayuso2-5/+6
2024-07-05netfilter: nf_tables: validate family when identifying table via handlePablo Neira Ayuso1-2/+3
2024-07-05netfilter: ipset: Fix suspicious rcu_dereference_protected()Jozsef Kadlecsik1-5/+6
2024-07-05netfilter: nftables: exthdr: fix 4-byte stack OOB writeFlorian Westphal1-5/+12
2024-07-05netfilter: ipset: Fix race between namespace cleanup and gc in the list:set typeJozsef Kadlecsik2-51/+60
2024-06-16netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()Eric Dumazet1-0/+2
2024-05-02ipvs: Fix checksumming on GSO of SCTP packetsIsmael Luceno1-2/+4
2024-05-02netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()Ziyang Xuan1-2/+6
2024-04-13netfilter: nf_tables: discard table flag update with pending basechain deletionPablo Neira Ayuso1-1/+19
2024-04-13netfilter: nf_tables: release mutex after nft_gc_seq_end from abort pathPablo Neira Ayuso1-5/+8
2024-04-13netfilter: nf_tables: release batch on table validation from abort pathPablo Neira Ayuso1-4/+10
2024-04-13netfilter: nf_tables: reject new basechain after table flag updatePablo Neira Ayuso1-0/+3
2024-04-13netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()Ziyang Xuan1-2/+7
2024-04-13netfilter: nf_tables: flush pending destroy work before exit_net releasePablo Neira Ayuso1-0/+1
2024-04-13netfilter: nf_tables: disallow timeout for anonymous setsPablo Neira Ayuso1-0/+7
generated by cgit v1.2.3 (git 2.25.1) at 2026-03-27 05:47:30 +0000