summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2025-02-08netfilter: nf_tables: reject mismatching sum of field_len with set key lengthPablo Neira Ayuso1-4/+4
2025-02-08netfilter: nft_flow_offload: update tcp state flags under lockFlorian Westphal1-5/+11
2025-02-08netfilter: nf_tables: fix set size with rbtree backendPablo Neira Ayuso2-2/+90
2025-01-17netfilter: conntrack: clamp maximum hashtable size to INT_MAXPablo Neira Ayuso1-1/+4
2025-01-17netfilter: nf_tables: imbalance in flowtable bindingPablo Neira Ayuso1-4/+11
2024-12-27netfilter: ipset: Fix for recursive locking warningPhil Sutter1-0/+3
2024-12-27ipvs: Fix clamp() of ip_vs_conn_tab on small memory systemsDavid Laight1-2/+2
2024-12-19netfilter: nf_tables: do not defer rule destruction via call_rcuFlorian Westphal1-17/+15
2024-12-19netfilter: IDLETIMER: Fix for possible ABBA deadlockPhil Sutter1-24/+28
2024-12-14netfilter: nft_set_hash: skip duplicated elements pending gc runPablo Neira Ayuso1-0/+16
2024-12-14netfilter: ipset: Hold module reference while requesting a modulePhil Sutter1-0/+5
2024-12-14netfilter: nft_inner: incorrect percpu area handling under softirqPablo Neira Ayuso1-12/+45
2024-12-14netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup levelPablo Neira Ayuso1-1/+1
2024-12-14netfilter: x_tables: fix LED ID check in led_tg_check()Dmitry Antipov1-1/+3
2024-12-14ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()Jinghao Jia1-3/+1
2024-12-05netfilter: ipset: add missing range check in bitmap_ip_uadtJeongjun Park1-5/+2
2024-12-05netfilter: nf_tables: must hold rcu read lock while iterating object type listFlorian Westphal1-7/+6
2024-12-05netfilter: nf_tables: must hold rcu read lock while iterating expression type...Florian Westphal1-6/+18
2024-12-05netfilter: nf_tables: avoid false-positive lockdep splat on rule deletionFlorian Westphal1-10/+13
2024-11-07netfilter: nf_tables: wait for rcu grace period on net_device removalPablo Neira Ayuso1-7/+34
2024-10-31netfilter: nft_payload: sanitize offset and length before calling skb_checksum()Pablo Neira Ayuso1-0/+3
2024-10-30netfilter: Fix use-after-free in get_info()Dong Chenchen1-1/+1
2024-10-24Merge tag 'net-6.12-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds4-2/+7
2024-10-21netfilter: xtables: fix typo causing some targets not to load on IPv6Pablo Neira Ayuso3-2/+3
2024-10-18Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpfLinus Torvalds1-1/+2
2024-10-17netfilter: bpf: must hold reference on net namespaceFlorian Westphal1-0/+4
2024-10-16bpf: Fix link info netfilter flags to populate defrag flagTyrone Wu1-1/+2
2024-10-09netfilter: xtables: avoid NFPROTO_UNSPEC where neededFlorian Westphal16-165/+422
2024-10-02move asm/unaligned.h to linux/unaligned.hAl Viro6-6/+6
2024-09-26netfilter: nfnetlink_queue: remove old clash resolution logicFlorian Westphal2-86/+0
2024-09-26netfilter: nf_tables: missing objects with no memcg accountingPablo Neira Ayuso7-15/+17
2024-09-26netfilter: nf_tables: use rcu chain hook list iterator from netlink dump pathPablo Neira Ayuso1-1/+1
2024-09-26netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_E...Simon Horman1-5/+2
2024-09-26netfilter: nf_tables: Keep deleted flowtable hooks until after RCUPhil Sutter1-1/+1
2024-09-26netfilter: ctnetlink: Guard possible unused functionsAndy Shevchenko1-1/+1
2024-09-26netfilter: conntrack: add clash resolution for reverse collisionsFlorian Westphal1-5/+51
2024-09-26netfilter: nf_nat: don't try nat source port reallocation for reverse dir clashFlorian Westphal1-2/+118
2024-09-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-2/+2
2024-09-15netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtre...Dan Carpenter1-2/+2
2024-09-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski3-7/+49
2024-09-12net: netfilter: move nf flowtable bpf initialization in nf_flow_table_module_...Lorenzo Bianconi2-1/+7
2024-09-12netfilter: nft_socket: make cgroupsv2 matching work with namespacesFlorian Westphal1-3/+38
2024-09-12netfilter: nft_socket: fix sk refcount leaksFlorian Westphal1-3/+4
2024-09-09netfilter: nft_flow_offload: Unmask upper DSCP bits in nft_flow_route()Ido Schimmel1-1/+2
2024-09-06Merge tag 'nf-next-24-09-06' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski26-148/+165
2024-09-06net/netfilter: make use of the helper macro LIST_HEAD()Hongbo Li1-3/+1
2024-09-03netfilter: nf_tables: set element timeout update supportPablo Neira Ayuso2-5/+44
2024-09-03netfilter: nf_tables: zero timeout means element never times outPablo Neira Ayuso2-17/+25
2024-09-03netfilter: nf_tables: consolidate timeout extension for elementsPablo Neira Ayuso2-34/+22
2024-09-03netfilter: nf_tables: annotate data-races around element expirationPablo Neira Ayuso2-2/+2
generated by cgit v1.2.3 (git 2.25.1) at 2026-03-25 00:15:38 +0000