summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2026-01-17netfilter: nf_tables: avoid chain re-validation if possibleFlorian Westphal1-4/+65
2026-01-17netfilter: nf_conncount: update last_gc only when GC has been performedFernando Fernandez Mancera1-1/+1
2026-01-17netfilter: nf_tables: fix memory leak in nf_tables_newrule()Zilin Guan1-1/+2
2026-01-17netfilter: nft_synproxy: avoid possible data-race on update operationFernando Fernandez Mancera1-3/+3
2026-01-11netfilter: nf_tables: remove redundant chain validation on register storePablo Neira Ayuso1-11/+0
2026-01-11netfilter: nf_tables: allow loads only when register is initializedFlorian Westphal1-4/+34
2026-01-11netfilter: nf_tables: pass context structure to nft_parse_register_loadFlorian Westphal20-32/+33
2026-01-11ipvs: fix ipv4 null-ptr-deref in route error pathSlavin Liu1-0/+3
2026-01-11netfilter: nf_conncount: fix leaked ct in error pathsFernando Fernandez Mancera1-11/+14
2026-01-11netfilter: nft_connlimit: update the count if add was skippedFernando Fernandez Mancera2-6/+19
2026-01-11netfilter: nf_conncount: rework API to use sk_buff directlyFernando Fernandez Mancera3-86/+126
2026-01-11netfilter: flowtable: check for maximum number of encapsulations in bridge vlanPablo Neira Ayuso1-1/+8
2025-11-24netfilter: nf_tables: reject duplicate device on updatesPablo Neira Ayuso1-0/+30
2025-10-19netfilter: nft_objref: validate objref and objrefmap expressionsFernando Fernandez Mancera1-0/+39
2025-10-19netfilter: nf_tables: drop unused 3rd argument from validate callback opsFlorian Westphal21-46/+23
2025-10-15ipvs: Defer ip_vs_ftp unregister during netns cleanupSlavin Liu1-1/+3
2025-10-15ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enableZhang Tengfei4-20/+17
2025-10-15netfilter: ipset: Remove unused htable_bits in macro ahash_regionZhen Ni1-4/+4
2025-09-09netfilter: conntrack: helper: Replace -EEXIST by -EBUSYPhil Sutter1-2/+2
2025-08-28netfilter: ctnetlink: fix refcount leak on table dumpFlorian Westphal1-11/+13
2025-08-15bpf: Check netfilter ctx accesses are alignedPaul Chaignon1-0/+3
2025-08-15netfilter: xt_nfacct: don't assume acct name is null-terminatedFlorian Westphal1-2/+2
2025-08-15bpf: Disable migration in nf_hook_run_bpf().Kuniyuki Iwashima1-1/+1
2025-08-15netfilter: nf_tables: adjust lockdep assertions handlingFedor Pchelkin1-2/+2
2025-08-15netfilter: nf_tables: Drop dead code from fill_*_info routinesPhil Sutter1-25/+0
2025-07-24netfilter: nf_conntrack: fix crash due to removal of uninitialised entryFlorian Westphal1-6/+20
2025-06-19netfilter: nf_nat: also check reverse tuple to obtain clashing entryFlorian Westphal1-3/+9
2025-06-19netfilter: nf_set_pipapo_avx2: fix initial map fillFlorian Westphal1-1/+20
2025-06-19netfilter: nft_tunnel: fix geneve_opt dumpFernando Fernandez Mancera1-4/+4
2025-06-19netfilter: nft_quota: match correctly when the quota just depletedZhongqiu Duan1-7/+13
2025-06-04netfilter: conntrack: Bound nf_conntrack sysctl writesNicolas Bouchinet1-3/+9
2025-05-18netfilter: ipset: fix region locking in hash typesJozsef Kadlecsik1-1/+1
2025-05-18ipvs: fix uninit-value for saddr in do_output_route4Julian Anastasov1-19/+8
2025-04-25nft_set_pipapo: fix incorrect avx2 match of 5th field octetFlorian Westphal1-1/+2
2025-04-10net: fix geneve_opt length integer overflowLin Ma1-1/+1
2025-04-10netfilter: nft_tunnel: fix geneve_opt type confusion additionLin Ma1-2/+2
2025-04-10netfilter: nf_tables: don't unregister hook when table is dormantFlorian Westphal1-2/+2
2025-04-10netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets onlyPablo Neira Ayuso1-1/+2
2025-03-28netfilter: nft_counter: Use u64_stats_t for statistic.Sebastian Andrzej Siewior1-44/+46
2025-03-22netfilter: nf_tables: allow clone callbacks to sleepFlorian Westphal7-19/+21
2025-03-22netfilter: nf_tables: bail out if stateful expression provides no .clonePablo Neira Ayuso1-8/+7
2025-03-22netfilter: nf_tables: use timestamp to check for set element timeoutPablo Neira Ayuso4-13/+28
2025-03-22netfilter: nft_exthdr: fix offset with ipv4_find_option()Alexey Kashavkin1-6/+4
2025-03-22ipvs: prevent integer overflow in do_ip_vs_get_ctl()Dan Carpenter1-4/+4
2025-03-22netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert...Kohei Enju1-0/+2
2025-03-22netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap ...Nicklas Bo Jensen1-2/+2
2025-03-22netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.Sebastian Andrzej Siewior1-2/+4
2025-02-08netfilter: nf_tables: reject mismatching sum of field_len with set key lengthPablo Neira Ayuso1-4/+4
2025-02-08netfilter: nft_flow_offload: update tcp state flags under lockFlorian Westphal1-5/+11
2025-02-08netfilter: nf_tables: fix set size with rbtree backendPablo Neira Ayuso2-2/+90
generated by cgit v1.2.3 (git 2.25.1) at 2026-03-26 10:20:53 +0000