summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2025-02-08netfilter: nf_tables: reject mismatching sum of field_len with set key lengthPablo Neira Ayuso
2025-02-08netfilter: nft_flow_offload: update tcp state flags under lockFlorian Westphal
2025-02-08netfilter: nf_tables: fix set size with rbtree backendPablo Neira Ayuso
2025-02-08netfilter: nft_set_rbtree: prefer sync gc to async workerFlorian Westphal
2025-02-08netfilter: nft_set_rbtree: rename gc deactivate+erase functionFlorian Westphal
2025-02-08netfilter: nf_tables: de-constify set commit ops function argumentFlorian Westphal
2025-01-17netfilter: conntrack: clamp maximum hashtable size to INT_MAXPablo Neira Ayuso
2025-01-17netfilter: nf_tables: imbalance in flowtable bindingPablo Neira Ayuso
2024-12-27netfilter: ipset: Fix for recursive locking warningPhil Sutter
2024-12-27ipvs: Fix clamp() of ip_vs_conn_tab on small memory systemsDavid Laight
2024-12-19netfilter: nf_tables: do not defer rule destruction via call_rcuFlorian Westphal
2024-12-19netfilter: IDLETIMER: Fix for possible ABBA deadlockPhil Sutter
2024-12-14netfilter: nft_set_hash: skip duplicated elements pending gc runPablo Neira Ayuso
2024-12-14netfilter: ipset: Hold module reference while requesting a modulePhil Sutter
2024-12-14netfilter: nft_inner: incorrect percpu area handling under softirqPablo Neira Ayuso
2024-12-14ipv6: introduce dst_rt6_info() helperEric Dumazet
2024-12-14netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup levelPablo Neira Ayuso
2024-12-14netfilter: x_tables: fix LED ID check in led_tg_check()Dmitry Antipov
2024-12-14ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()Jinghao Jia
2024-12-09netfilter: ipset: add missing range check in bitmap_ip_uadtJeongjun Park
2024-12-09netfilter: nf_tables: must hold rcu read lock while iterating object type listFlorian Westphal
2024-12-09netfilter: nf_tables: skip transaction if update object is not implementedPablo Neira Ayuso
2024-12-09netfilter: nf_tables: must hold rcu read lock while iterating expression type...Florian Westphal
2024-12-09netfilter: nf_tables: avoid false-positive lockdep splat on rule deletionFlorian Westphal
2024-12-09netfilter: nf_tables: Introduce nf_tables_getrule_single()Phil Sutter
2024-12-09netfilter: nf_tables: Open-code audit log call in nf_tables_getrule()Phil Sutter
2024-11-14netfilter: nf_tables: wait for rcu grace period on net_device removalPablo Neira Ayuso
2024-11-14netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctxFlorian Westphal
2024-11-08netfilter: nft_payload: sanitize offset and length before calling skb_checksum()Pablo Neira Ayuso
2024-11-08netfilter: Fix use-after-free in get_info()Dong Chenchen
2024-11-01netfilter: xtables: fix typo causing some targets not to load on IPv6Pablo Neira Ayuso
2024-11-01netfilter: bpf: must hold reference on net namespaceFlorian Westphal
2024-11-01bpf: Fix link info netfilter flags to populate defrag flagTyrone Wu
2024-10-17netfilter: xtables: avoid NFPROTO_UNSPEC where neededFlorian Westphal
2024-10-17netfilter: nf_nat: don't try nat source port reallocation for reverse dir clashFlorian Westphal
2024-10-10netfilter: nf_tables: restore set elements when delete set failsPablo Neira Ayuso
2024-10-10netfilter: nf_tables: fix memleak in map from abort pathPablo Neira Ayuso
2024-10-04netfilter: nf_tables: use rcu chain hook list iterator from netlink dump pathPablo Neira Ayuso
2024-10-04netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_E...Simon Horman
2024-10-04netfilter: nf_tables: Keep deleted flowtable hooks until after RCUPhil Sutter
2024-10-04netfilter: nf_tables: remove annotation to access set timeout while holding lockPablo Neira Ayuso
2024-10-04netfilter: nf_tables: reject expiration higher than timeoutPablo Neira Ayuso
2024-10-04netfilter: nf_tables: reject element expiration with no timeoutPablo Neira Ayuso
2024-10-04netfilter: nf_tables: elements with timeout below CONFIG_HZ never expirePablo Neira Ayuso
2024-09-30netfilter: nf_tables: missing iterator type in lookup walkPablo Neira Ayuso
2024-09-30netfilter: nft_set_pipapo: walk over current view on netlink dumpPablo Neira Ayuso
2024-09-30netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtre...Dan Carpenter
2024-09-30netfilter: nft_socket: make cgroupsv2 matching work with namespacesFlorian Westphal
2024-09-18netfilter: nft_socket: fix sk refcount leaksFlorian Westphal
2024-09-12netfilter: nf_conncount: fix wrong variable typeYunjian Wang