summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2025-10-19netfilter: nft_objref: validate objref and objrefmap expressionsFernando Fernandez Mancera1-0/+39
2025-10-19netfilter: nf_tables: drop unused 3rd argument from validate callback opsFlorian Westphal21-46/+23
2025-10-15ipvs: Defer ip_vs_ftp unregister during netns cleanupSlavin Liu1-1/+3
2025-10-15ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enableZhang Tengfei4-20/+17
2025-10-15netfilter: ipset: Remove unused htable_bits in macro ahash_regionZhen Ni1-4/+4
2025-09-09netfilter: conntrack: helper: Replace -EEXIST by -EBUSYPhil Sutter1-2/+2
2025-08-28netfilter: ctnetlink: fix refcount leak on table dumpFlorian Westphal1-11/+13
2025-08-15bpf: Check netfilter ctx accesses are alignedPaul Chaignon1-0/+3
2025-08-15netfilter: xt_nfacct: don't assume acct name is null-terminatedFlorian Westphal1-2/+2
2025-08-15bpf: Disable migration in nf_hook_run_bpf().Kuniyuki Iwashima1-1/+1
2025-08-15netfilter: nf_tables: adjust lockdep assertions handlingFedor Pchelkin1-2/+2
2025-08-15netfilter: nf_tables: Drop dead code from fill_*_info routinesPhil Sutter1-25/+0
2025-07-24netfilter: nf_conntrack: fix crash due to removal of uninitialised entryFlorian Westphal1-6/+20
2025-06-19netfilter: nf_nat: also check reverse tuple to obtain clashing entryFlorian Westphal1-3/+9
2025-06-19netfilter: nf_set_pipapo_avx2: fix initial map fillFlorian Westphal1-1/+20
2025-06-19netfilter: nft_tunnel: fix geneve_opt dumpFernando Fernandez Mancera1-4/+4
2025-06-19netfilter: nft_quota: match correctly when the quota just depletedZhongqiu Duan1-7/+13
2025-06-04netfilter: conntrack: Bound nf_conntrack sysctl writesNicolas Bouchinet1-3/+9
2025-05-18netfilter: ipset: fix region locking in hash typesJozsef Kadlecsik1-1/+1
2025-05-18ipvs: fix uninit-value for saddr in do_output_route4Julian Anastasov1-19/+8
2025-04-25nft_set_pipapo: fix incorrect avx2 match of 5th field octetFlorian Westphal1-1/+2
2025-04-10net: fix geneve_opt length integer overflowLin Ma1-1/+1
2025-04-10netfilter: nft_tunnel: fix geneve_opt type confusion additionLin Ma1-2/+2
2025-04-10netfilter: nf_tables: don't unregister hook when table is dormantFlorian Westphal1-2/+2
2025-04-10netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets onlyPablo Neira Ayuso1-1/+2
2025-03-28netfilter: nft_counter: Use u64_stats_t for statistic.Sebastian Andrzej Siewior1-44/+46
2025-03-22netfilter: nf_tables: allow clone callbacks to sleepFlorian Westphal7-19/+21
2025-03-22netfilter: nf_tables: bail out if stateful expression provides no .clonePablo Neira Ayuso1-8/+7
2025-03-22netfilter: nf_tables: use timestamp to check for set element timeoutPablo Neira Ayuso4-13/+28
2025-03-22netfilter: nft_exthdr: fix offset with ipv4_find_option()Alexey Kashavkin1-6/+4
2025-03-22ipvs: prevent integer overflow in do_ip_vs_get_ctl()Dan Carpenter1-4/+4
2025-03-22netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert...Kohei Enju1-0/+2
2025-03-22netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap ...Nicklas Bo Jensen1-2/+2
2025-03-22netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.Sebastian Andrzej Siewior1-2/+4
2025-02-08netfilter: nf_tables: reject mismatching sum of field_len with set key lengthPablo Neira Ayuso1-4/+4
2025-02-08netfilter: nft_flow_offload: update tcp state flags under lockFlorian Westphal1-5/+11
2025-02-08netfilter: nf_tables: fix set size with rbtree backendPablo Neira Ayuso2-2/+90
2025-02-08netfilter: nft_set_rbtree: prefer sync gc to async workerFlorian Westphal1-59/+65
2025-02-08netfilter: nft_set_rbtree: rename gc deactivate+erase functionFlorian Westphal1-5/+6
2025-02-08netfilter: nf_tables: de-constify set commit ops function argumentFlorian Westphal1-4/+3
2025-01-17netfilter: conntrack: clamp maximum hashtable size to INT_MAXPablo Neira Ayuso1-1/+4
2025-01-17netfilter: nf_tables: imbalance in flowtable bindingPablo Neira Ayuso1-4/+11
2024-12-27netfilter: ipset: Fix for recursive locking warningPhil Sutter1-0/+3
2024-12-27ipvs: Fix clamp() of ip_vs_conn_tab on small memory systemsDavid Laight1-2/+2
2024-12-19netfilter: nf_tables: do not defer rule destruction via call_rcuFlorian Westphal1-17/+15
2024-12-19netfilter: IDLETIMER: Fix for possible ABBA deadlockPhil Sutter1-24/+28
2024-12-14netfilter: nft_set_hash: skip duplicated elements pending gc runPablo Neira Ayuso1-0/+16
2024-12-14netfilter: ipset: Hold module reference while requesting a modulePhil Sutter1-0/+5
2024-12-14netfilter: nft_inner: incorrect percpu area handling under softirqPablo Neira Ayuso1-12/+45
2024-12-14ipv6: introduce dst_rt6_info() helperEric Dumazet4-16/+12
generated by cgit v1.2.3 (git 2.25.1) at 2026-02-25 19:23:55 +0000