messages from 2026-05-20 18:48:38 to 2026-05-28 22:53:02 UTC [more...]
[PATCH] netfilter: TCPMSS: fix dropped packets when MSS option is unaligned
2026-05-28 22:52 UTC (14+ messages)
` [PATCH v2] "
[PATCH v2 net] netfilter: nft_payload: validate offset for all csum_type paths
2026-05-28 16:08 UTC (2+ messages)
[PATCH net] netfilter: nft_payload: move offset bounds check outside csum condition
2026-05-28 15:28 UTC (3+ messages)
` [PATCH v2 net] netfilter: nft_payload: validate offset for all csum_type paths
[PATCH] netfilter: ipvs: fix ct refcount leak when template is invalid
2026-05-28 14:27 UTC (3+ messages)
` [syzbot ci] "
[nft PATCH v2] scanner: Accept all statements' first words in all scopes
2026-05-28 11:35 UTC (3+ messages)
[PATCH nf v2] netfilter: nft_ct: bail out on template ct in get eval
2026-05-28 11:09 UTC
[PATCH nf] netfilter: nft_ct: fix OOB in NFT_CT_SRC/DST eval
2026-05-28 10:26 UTC (12+ messages)
[PATCH v3] ipvs: Replace use of system_unbound_wq with system_dfl_long_wq
2026-05-28 10:19 UTC (2+ messages)
[conntrack-tools] conntrack.8: Document --stats counters
2026-05-28 7:46 UTC (2+ messages)
[PATCH v2 net] netfilter: flowtable: fix offloaded ct timeout never being extended
2026-05-28 7:08 UTC
[RFC PATCH net] netfilter: flowtable: fix offloaded ct timeout never being extended
2026-05-28 5:22 UTC (4+ messages)
[PATCH 0/5 nf-next v4] netfilter: synproxy: misc fixes about synproxy core
2026-05-27 22:24 UTC (8+ messages)
` [PATCH 1/5 nf-next v4] netfilter: synproxy: drop packets if timestamp adjustment fails
` [PATCH 2/5 nf-next v4] netfilter: synproxy: adjust duplicate timestamp options
` [PATCH 3/5 nf-next v4] netfilter: synproxy: fix unaligned memory access in timestamp adjustment
` [PATCH 4/5 nf-next v4] netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock
` [PATCH 5/5 nf-next v4] netfilter: synproxy: add mutex to guard hook reference counting
[PATCH] netfilter: nft_tunnel: fix use-after-free on object destroy
2026-05-27 21:18 UTC (2+ messages)
[PATCH nf-next 0/6] add refcount to ct timeout/helper
2026-05-27 13:39 UTC (10+ messages)
` [PATCH nf-next 1/6] netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flags
` [PATCH nf-next 2/6] netfilter: cttimeout: detach dataplane timeout policy and add refcount
` [PATCH nf-next 3/6] netfilter: nf_conntrack_helper: dynamically allocate struct nf_conntrack_helper
` [PATCH nf-next 4/6] netfilter: nf_conntrack_pptp: move GRE specific cleanup to GRE tracker
` [PATCH nf-next 5/6] netfilter: nf_conntrack_helper: add refcounting from datapath
` [PATCH nf-next 6/6] netfilter: conntrack: revert ct extension genid infrastructure
[RFC nf 0/2] netfilter: add restrictions/validations for packet rewrites
2026-05-27 12:11 UTC (3+ messages)
` [RFC nf 1/2] netfilter: nfnetlink_queue: restrict writes to network header
` [RFC nf 2/2] netfilter: nftables: restrict linklayer and network header writes
[PATCH nf] netfilter: conntrack_irc: fix possible out-of-bounds read
2026-05-27 10:55 UTC (2+ messages)
[PATCH nf v2 1/1] bridge: br_netfilter: move fake rtable off struct net_bridge
2026-05-27 7:42 UTC (2+ messages)
[PATCH libmnl] examples: rtnl: fix rtnl-link-dump* extra header
2026-05-27 7:41 UTC
[PATCH nf] netfilter: nft_fib_ipv6: bail out of sibling walk if rt got unlinked
2026-05-27 5:18 UTC (3+ messages)
ipset not completely working in mangle:PREROUTING
2026-05-27 1:42 UTC (3+ messages)
[PATCH net-next 00/11] netfilter: updates for net-next
2026-05-27 1:30 UTC (13+ messages)
` [PATCH net-next 01/11] netfilter: x_tables: disable 32bit compat interface in user namespaces
` [PATCH net-next 02/11] netfilter: add option for GCOV profiling
` [PATCH net-next 03/11] netfilter: allow nfnetlink built-in only
` [PATCH net-next 04/11] netfilter: nf_conncount: use per-rule hash initval
` [PATCH net-next 05/11] netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
` [PATCH net-next 06/11] netfilter: nft_set_rbtree: remove dead conditional
` [PATCH net-next 07/11] netfilter: nfnl_cthelper: apply per-class values when updating policies
` [PATCH net-next 08/11] netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
` [PATCH net-next 09/11] netfilter: nf_conntrack_proto_tcp: fix typos in comments
` [PATCH net-next 10/11] netfilter: nft_set_pipapo_avx2: restore performance optimization
` [PATCH net-next 11/11] netfilter: nf_conntrack_ftp: avoid u16 overflows
[PATCH bpf-next v7 0/7] bpf: add icmp_send kfunc
2026-05-26 22:05 UTC (13+ messages)
` [PATCH bpf-next v7 1/7] net: move netfilter nf_reject_fill_skb_dst to core ipv4
` [PATCH bpf-next v7 2/7] net: move netfilter nf_reject6_fill_skb_dst to core ipv6
` [PATCH bpf-next v7 3/7] bpf: add bpf_icmp_send kfunc
` [PATCH bpf-next v7 4/7] selftests/bpf: add bpf_icmp_send kfunc cgroup_skb tests
` [PATCH bpf-next v7 5/7] selftests/bpf: add bpf_icmp_send kfunc cgroup_skb IPv6 tests
` [PATCH bpf-next v7 6/7] selftests/bpf: add bpf_icmp_send kfunc tc tests
` [PATCH bpf-next v7 7/7] selftests/bpf: add bpf_icmp_send recursion test
[PATCH 0/5 nf-next v3] netfilter: synproxy: misc fixes about synproxy core
2026-05-26 21:18 UTC (8+ messages)
` [PATCH 1/5 nf-next v3] netfilter: synproxy: drop packets if timestamp adjustment fails
` [PATCH 2/5 nf-next v3] netfilter: synproxy: adjust duplicate timestamp options
` [PATCH 3/5 nf-next v3] netfilter: synproxy: fix unaligned memory access in timestamp adjustment
` [PATCH 4/5 nf-next v3] netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock
` [PATCH 5/5 nf-next v3] netfilter: synproxy: add mutex to guard hook reference counting
[PATCH 0/4 nf v2] netfilter: synproxy: timestamp adjustment fixes
2026-05-26 13:12 UTC (11+ messages)
` [PATCH 1/4 nf v2] netfilter: synproxy: drop packets if timestamp adjustment fails
` [PATCH 2/4 nf v2] netfilter: synproxy: adjust duplicate timestamp options
` [PATCH 3/4 nf v2] netfilter: synproxy: fix unaligned memory access in timestamp adjustment
` [PATCH 4/4 nf v2] netfilter: synproxy: fix possible write to stale pointer
Followup needed for netfilter: nft_fib_ipv6: walk fib6_siblings under RCU?
2026-05-26 1:47 UTC (2+ messages)
[PATCH nf 1/1] bridge: br_netfilter: give fake rtable its own lifetime
2026-05-26 1:37 UTC (3+ messages)
[PATCH] netfilter: flowtable: resolve LAG slave for direct HW offload
2026-05-25 23:51 UTC (4+ messages)
[PATCH] netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()
2026-05-25 22:35 UTC (2+ messages)
[PATCH net 00/10] netfilter: updates for net
2026-05-25 17:40 UTC (14+ messages)
` [PATCH net 01/10] netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check
` [PATCH net 02/10] netfilter: synproxy: refresh tcphdr after skb_ensure_writable
` [PATCH net 03/10] netfilter: nf_conntrack_gre: fix gre keymap list corruption
` [PATCH net 04/10] netfilter: xt_cpu: prefer raw_smp_processor_id
` [PATCH net 05/10] netfilter: disable payload mangling in userns
` [PATCH net 06/10] netfilter: ebtables: fix OOB read in compat_mtw_from_user
` [PATCH net 07/10] netfilter: nft_fib_ipv6: walk fib6_siblings under RCU
` [PATCH net 08/10] netfilter: nft_fib_ipv6: handle routes via external nexthop
` [PATCH net 09/10] selftests: netfilter: add nft_fib_nexthop test
` [PATCH net 10/10] netfilter: nf_tables: fix dst corruption in same register operation
[PATCH nf-next] netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures
2026-05-25 15:35 UTC
[PATCH nf] netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag
2026-05-25 14:00 UTC (2+ messages)
[PATCH nf] ipvs: clear the svc scheduler ptr early on edit
2026-05-25 4:07 UTC
[PATCH v3 nf-next] ipvs: add conn_max sysctl to limit connections
2026-05-25 3:54 UTC
[PATCH 0/3 nf-next] netfilter: synproxy: timestamp adjustment fixes
2026-05-24 21:24 UTC (9+ messages)
` [PATCH 1/3 nf-next] netfilter: synproxy: drop packets if timestamp adjustment fails
` [PATCH 2/3 nf-next] netfilter: synproxy: drop packets with duplicated timestamp options
` [PATCH 3/3 nf-next] netfilter: synproxy: fix unaligned memory access in timestamp adjustment
[PATCH net-next v2 0/3] netfilter: conntrack: add shared port parser and use it in IRC and Amanda helpers
2026-05-24 11:14 UTC (5+ messages)
` [PATCH net-next v3 0/4] netfilter: conntrack: shared port parser for helpers
` [PATCH net-next v3 1/4] netfilter: conntrack: add shared port and uint parsers "
[PATCH v2 nf-next] ipvs: add conn_max sysctl to limit connections
2026-05-23 20:44 UTC (2+ messages)
[SECURITY] nft_byteorder: incorrect u32* stride in 64-bit byteorder eval leading to firewall bypass
2026-05-23 14:39 UTC (2+ messages)
[PATCH 0/6] netfilter: ipset fixes, second batch
2026-05-23 13:15 UTC (7+ messages)
` [PATCH 1/6] netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
` [PATCH 2/6] netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types
` [PATCH 3/6] netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
` [PATCH 4/6] netfilter: ipset: skip gc when resize is in progress
` [PATCH 5/6] netfilter: ipset: fix potential torn read in reuse/forceadd cases
` [PATCH 6/6] netfilter: ipset: add comment how cidr bookkeeping is working
[PATCH nf] netfilter: ebtables: fix OOB read in compat_mtw_from_user
2026-05-23 13:23 UTC (3+ messages)
[PATCH nf v2 1/1] netfilter: ipset: preserve comment lifetime across resize and gc expiry
2026-05-23 12:47 UTC (2+ messages)
[PATCH nf-next 0/5] netfilter: conntrack: remove some code
2026-05-23 8:28 UTC (9+ messages)
` [PATCH nf-next 1/5] netfilter: nf_conntrack_helper: do not hash by tuple
` [PATCH nf-next 2/5] netfilter: conntrack: get rid of tuple in helper definitions
` [PATCH nf-next 3/5] netfilter: nf_conntrack: switch to static registration
` [PATCH nf-next 4/5] netfilter: remove obsolete nf_ct_helper_init api
` [PATCH nf-next 5/5] netfilter: conntrack: add deprecation warnings for irc and pptp trackers
[PATCH] ipvs: Use flexible array for MH lookup table
2026-05-22 17:12 UTC (2+ messages)
[RFC PATCH v4 00/19] Support socket access-control
2026-05-22 15:42 UTC (7+ messages)
` [RFC PATCH v4 01/19] landlock: "
[PATCH nf-next] ipvs: add conn_max sysctl to limit connections
2026-05-22 14:42 UTC (2+ messages)
[PATCH nf] netfilter: xt_NFQUEUE: prefer raw_smp_processor_id
2026-05-22 10:47 UTC
[PATCH nf] netfilter: xt_cpu: prefer raw_smp_processor_id
2026-05-22 10:31 UTC (4+ messages)
[PATCH] netfilter: synproxy: refresh tcphdr after skb_ensure_writable
2026-05-22 9:51 UTC (2+ messages)
[PATCH nf v2] netfilter: nf_conncount: prevent connlimit drops for early confirmed ct
2026-05-22 9:29 UTC (4+ messages)
[PATCH v2 net-next 2/2] ipvs: Replace use of system_unbound_wq with system_dfl_long_wq
2026-05-22 5:19 UTC (2+ messages)
[PATCH nf-next v3] netfilter: add option for GCOV profiling
2026-05-21 20:11 UTC
[PATCH nft] tests: shell: add stateless nat test case
2026-05-21 8:18 UTC
[PATCH bpf-next v6 0/4] bpf: add icmp_send kfunc
2026-05-20 19:15 UTC (7+ messages)
` [PATCH bpf-next v6 3/6] bpf: add bpf_icmp_send kfunc
` [PATCH bpf-next v6 4/6] selftests/bpf: add bpf_icmp_send kfunc tests
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox