summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2025-03-22netfilter: nft_exthdr: fix offset with ipv4_find_option()Alexey Kashavkin1-6/+4
2025-03-22ipvs: prevent integer overflow in do_ip_vs_get_ctl()Dan Carpenter1-4/+4
2025-03-22netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert...Kohei Enju1-0/+2
2025-03-22netfilter: nf_tables: make destruction work queue pernetFlorian Westphal2-14/+18
2025-03-22netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap ...Nicklas Bo Jensen1-2/+2
2025-03-22netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.Sebastian Andrzej Siewior1-2/+4
2025-02-08netfilter: nf_tables: reject mismatching sum of field_len with set key lengthPablo Neira Ayuso1-4/+4
2025-02-08netfilter: nft_flow_offload: update tcp state flags under lockFlorian Westphal1-5/+11
2025-02-08netfilter: nf_tables: fix set size with rbtree backendPablo Neira Ayuso2-2/+90
2025-01-09netfilter: conntrack: clamp maximum hashtable size to INT_MAXPablo Neira Ayuso1-1/+4
2025-01-09netfilter: nf_tables: imbalance in flowtable bindingPablo Neira Ayuso1-4/+11
2024-12-19netfilter: ipset: Fix for recursive locking warningPhil Sutter1-0/+3
2024-12-18ipvs: Fix clamp() of ip_vs_conn_tab on small memory systemsDavid Laight1-2/+2
2024-12-11netfilter: nf_tables: do not defer rule destruction via call_rcuFlorian Westphal1-17/+15
2024-12-11netfilter: IDLETIMER: Fix for possible ABBA deadlockPhil Sutter1-24/+28
2024-12-04netfilter: nft_set_hash: skip duplicated elements pending gc runPablo Neira Ayuso1-0/+16
2024-12-04netfilter: ipset: Hold module reference while requesting a modulePhil Sutter1-0/+5
2024-12-03netfilter: nft_inner: incorrect percpu area handling under softirqPablo Neira Ayuso1-12/+45
2024-11-28netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup levelPablo Neira Ayuso1-1/+1
2024-11-28netfilter: x_tables: fix LED ID check in led_tg_check()Dmitry Antipov1-1/+3
2024-11-28ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()Jinghao Jia1-3/+1
2024-11-21Merge tag 'net-next-6.13' of git://git.kernel.org/pub/scm/linux/kernel/git/ne...Linus Torvalds12-188/+545
2024-11-19Merge tag 'timers-core-2024-11-18' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-3/+1
2024-11-19Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPaolo Abeni1-5/+2
2024-11-15Merge tag 'nf-24-11-14' of git://git.kernel.org/pub/scm/linux/kernel/git/netf...Jakub Kicinski1-5/+2
2024-11-15netfilter: bitwise: add support for doing AND, OR and XOR directlyJeremy Sowden1-11/+123
2024-11-15netfilter: bitwise: rename some boolean operation functionsJeremy Sowden1-17/+17
2024-11-15netfilter: flow_offload: Convert nft_flow_route() to dscp_t.Guillaume Nault1-2/+2
2024-11-14netfilter: ipset: add missing range check in bitmap_ip_uadtJeongjun Park1-5/+2
2024-11-14netfilter: nf_tables: allocate element update information dynamicallyFlorian Westphal1-21/+36
2024-11-14netfilter: nf_tables: switch trans_elem to real flex arrayFlorian Westphal1-0/+90
2024-11-14netfilter: nf_tables: prepare nft audit for set element compactionFlorian Westphal1-3/+18
2024-11-14netfilter: nf_tables: prepare for multiple elements in nft_trans_elem structureFlorian Westphal1-64/+164
2024-11-14netfilter: nf_tables: add nft_trans_commit_list_add_elem helperFlorian Westphal1-5/+16
2024-11-14netfilter: bpf: Pass string literal as format argument of request_module()Simon Horman1-1/+1
2024-11-14netfilter: nfnetlink: Report extack policy errors for batched opsDonald Hunter1-1/+1
2024-11-11net: convert to nla_get_*_default()Johannes Berg3-12/+4
2024-11-07Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-7/+34
2024-11-07Merge tag 'nf-next-24-11-07' of git://git.kernel.org/pub/scm/linux/kernel/git...Paolo Abeni4-62/+87
2024-11-07netfilter: nf_tables: wait for rcu grace period on net_device removalPablo Neira Ayuso1-7/+34
2024-11-07alarmtimers: Remove return value from alarm functionsThomas Gleixner1-3/+1
2024-11-05netfilter: nf_tables: must hold rcu read lock while iterating object type listFlorian Westphal1-7/+6
2024-11-05netfilter: nf_tables: must hold rcu read lock while iterating expression type...Florian Westphal1-6/+18
2024-11-05netfilter: nf_tables: avoid false-positive lockdep splats with basechain hookFlorian Westphal1-3/+5
2024-11-05netfilter: nf_tables: avoid false-positive lockdep splats in set walkerFlorian Westphal2-5/+8
2024-11-05netfilter: nf_tables: avoid false-positive lockdep splats with flowtablesFlorian Westphal2-8/+11
2024-11-05netfilter: nf_tables: avoid false-positive lockdep splats with setsFlorian Westphal1-11/+16
2024-11-05netfilter: nf_tables: avoid false-positive lockdep splat on rule deletionFlorian Westphal1-10/+13
2024-10-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-1/+4
2024-10-31netfilter: nft_payload: sanitize offset and length before calling skb_checksum()Pablo Neira Ayuso1-0/+3