Linux Netfilter development
 help / color / mirror / Atom feed
 messages from 2026-06-11 07:22:14 to 2026-06-23 11:09:01 UTC [more...]

[PATCH] libmnl: add MNL_TYPE_UARR for devlink u64 array attributes
 2026-06-23 11:08 UTC  (5+ messages)
  ` RE:: "
    ` : "
      ` [EXTERNAL] "

[PATCH nf,v2] netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration
 2026-06-23 10:41 UTC 

[PATCH v2 v6.6-v6.1] netfilter: nf_tables: always walk all pending catchall elements
 2026-06-23  6:14 UTC 

[PATCH nf,v1 1/4] netfilter: ctnetlink: do not allow to reset helper on existing conntrack
 2026-06-23  5:46 UTC  (4+ messages)
` [PATCH nf,v1 2/4] netfilter: nf_conntrack_expect: store master_tuple in expectation
` [PATCH nf,v1 3/4] netfilter: nf_conntrack_expect: run expectation eviction with no helper
` [PATCH nf,v1 4/4] netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration

[PATCH nf] netfilter: nft_ct: expectation timeouts are passed in milliseconds
 2026-06-23  5:30 UTC 

[PATCH bpf-next 0/2] bpf: Guard conntrack opts error writes
 2026-06-22 23:10 UTC  (10+ messages)
` [PATCH bpf-next 1/2] "
` [PATCH bpf-next 2/2] selftests/bpf: Cover small "
` [PATCH bpf-next v2 0/2] bpf: Guard "
  ` [PATCH bpf-next v2 1/2] "
  ` [PATCH bpf-next v2 2/2] selftests/bpf: Cover small "

[PATCH nf,RESEND] netfilter: nf_conntrack_expect: store master_tuple in expectation
 2026-06-22 22:02 UTC 

[PATCH nf] netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration
 2026-06-22 19:49 UTC 

[PATCH nf] netfilter: nf_conntrack_expect: store master_tuple in expectation
 2026-06-22 19:36 UTC 

[PATCH nf] netfilter: nf_conntrack_expect: run expectation eviction with no helper
 2026-06-22 19:36 UTC 

[PATCH net,v2 00/14] Netfilter fixes for net
 2026-06-22 17:40 UTC  (17+ messages)
` [PATCH net 01/14] netfilter: flowtable: fix offloaded ct timeout never being extended
` [PATCH net 02/14] netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst
` [PATCH net 03/14] netfilter: xt_cluster: reject template conntracks in hash match
` [PATCH net 04/14] netfilter: flowtable: fix and simplify IP6IP6 tunnel handling
` [PATCH net 05/14] netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
` [PATCH net 06/14] netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types
` [PATCH net 07/14] netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
` [PATCH net 08/14] netfilter: ipset: make sure gc is properly stopped
` [PATCH net 09/14] netfilter: nft_payload: reject offsets exceeding 65535 bytes
` [PATCH net 10/14] netfilter: nft_meta_bridge: add validate callback for get operations
` [PATCH net 11/14] netfilter: nft_flow_offload: zero device address for non-ether case
` [PATCH net 12/14] netfilter: nf_reject: skip iphdr options when looking for icmp header
` [PATCH net 13/14] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
` [PATCH net 14/14] netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak

[PATCH bpf-next v8 0/7] bpf: add icmp_send kfunc
 2026-06-22 12:41 UTC  (10+ messages)
` [PATCH bpf-next v8 1/7] net: move netfilter nf_reject_fill_skb_dst to core ipv4
` [PATCH bpf-next v8 2/7] net: move netfilter nf_reject6_fill_skb_dst to core ipv6
` [PATCH bpf-next v8 3/7] bpf: add bpf_icmp_send kfunc
` [PATCH bpf-next v8 4/7] selftests/bpf: add bpf_icmp_send kfunc cgroup_skb tests
` [PATCH bpf-next v8 5/7] selftests/bpf: add bpf_icmp_send kfunc cgroup_skb IPv6 tests
` [PATCH bpf-next v8 6/7] selftests/bpf: add bpf_icmp_send kfunc tc tests
` [PATCH bpf-next v8 7/7] selftests/bpf: add bpf_icmp_send recursion test

[Kernel Bug] INFO: task hung in xt_find_table
 2026-06-22 12:33 UTC  (5+ messages)

[PATCH nf] netfilter: ctnetlink: do not allow to reset helper on existing conntrack
 2026-06-22 11:57 UTC 

[PATCH nf v3 1/2] netfilter: nf_flow_table: separate tunnel route state from direct xmit
 2026-06-22 10:10 UTC  (2+ messages)
` [PATCH nf v3 2/2] selftests: netfilter: add bridge tunnel flowtable regression

[PATCH v2] netfilter: TCPMSS: fix dropped packets when MSS option is unaligned
 2026-06-21 19:46 UTC  (3+ messages)
` [PATCH nf-next v3] netfilter: TCPMSS: handle packets with unaligned MSS option

[regression] Network failure beyond first connection after 69894e5b4c5e ("netfilter: nft_connlimit: update the count if add was skipped")
 2026-06-20 22:32 UTC  (11+ messages)
        ` Bug#1130336: "

[PATCH net 00/16] Netfilter fixes for net
 2026-06-20 22:28 UTC  (18+ messages)
` [PATCH net 01/16] netfilter: flowtable: fix offloaded ct timeout never being extended
` [PATCH net 02/16] netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst
` [PATCH net 03/16] netfilter: xt_cluster: reject template conntracks in hash match
` [PATCH net 04/16] netfilter: flowtable: fix and simplify IP6IP6 tunnel handling
` [PATCH net 05/16] netfilter: nfnetlink: make OOM conditions fatal
` [PATCH net 06/16] netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
` [PATCH net 07/16] netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types
` [PATCH net 08/16] netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
` [PATCH net 09/16] netfilter: ipset: make sure gc is properly stopped
` [PATCH net 10/16] netfilter: nft_payload: reject offsets exceeding 65535 bytes
` [PATCH net 11/16] netfilter: nft_meta_bridge: add validate callback for get operations
` [PATCH net 12/16] netfilter: nft_flow_offload: zero device address for non-ether case
` [PATCH net 13/16] netfilter: nf_reject: skip iphdr options when looking for icmp header
` [PATCH net 14/16] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
` [PATCH net 15/16] netfilter: nf_conntrack_expect: store master_tuple in expectation
` [PATCH net 16/16] netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak

[PATCH v6.1 0/3] Fix CVE-2026-23272
 2026-06-20 11:54 UTC  (5+ messages)
` [PATCH v6.1 1/3] netfilter: nf_tables: always increment set element count
` [PATCH v6.1 2/3] netfilter: nf_tables: fix set size with rbtree backend
` [PATCH v6.1 3/3] netfilter: nf_tables: unconditionally bump set->nelems before insertion

[PATCH v6.6-v6.1] netfilter: nf_tables: always walk all pending catchall elements
 2026-06-20 11:54 UTC  (2+ messages)

[PATCH] minor spelling and grammar fixes in doc
 2026-06-20  8:37 UTC 

[PATCH 1/1] netfilter: nf_tables_offload: drop device refcount on error
 2026-06-19  9:18 UTC  (2+ messages)

[PATCH nf] netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
 2026-06-18 22:34 UTC 

[PATCH 0/9 nf-next] netfilter: replace raw warnings with
 2026-06-18 20:38 UTC  (7+ messages)
` [PATCH 4/9 nf-next] netfilter: conntrack: use DEBUG_NET_WARN_ON_ONCE on packet paths

[PATCH nf] netfilter: nf_conntrack_expect: store master_tuple in expectation
 2026-06-18 16:31 UTC 

[PATCH nf] netfilter: nft_payload: reject offsets exceeding 65535 bytes
 2026-06-18 15:18 UTC  (2+ messages)

[PATCH nf] netfilter: nft_meta_bridge: add validate callback for get operations
 2026-06-18 15:15 UTC  (2+ messages)

[PATCH nf] netfilter: ip6t_ah: validate AH header length
 2026-06-18 12:58 UTC 

[PATCH nf,v6] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
 2026-06-18 11:56 UTC 

[nft PATCH] tests: shell: Run tests with a fixed TZ
 2026-06-18 11:21 UTC  (2+ messages)

[PATCH nf v2 1/1] netfilter: nf_flow_table: separate tunnel route state from direct xmit
 2026-06-18 10:30 UTC  (2+ messages)

[PATCH nf] netfilter: nf_reject: skip iphdr options when looking for icmp header
 2026-06-18  8:49 UTC 

[PATCH nf] netfilter: nft_flow_offload: zero device address for non-ether case
 2026-06-18  6:25 UTC 

[PATCH nf,v5] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
 2026-06-17 23:43 UTC 

[PATCH nf,v4] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
 2026-06-17 23:07 UTC 

[PATCH nf,v3] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
 2026-06-17 16:51 UTC 

[nft PATCH] intervals: Fix for inconsistent union field use
 2026-06-17 16:03 UTC  (2+ messages)

[PATCH v3 0/7] netfilter: ipset fixes, second batch
 2026-06-17 13:28 UTC  (9+ messages)
` [PATCH v3 1/7] netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
` [PATCH v3 2/7] netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types
` [PATCH v3 3/7] netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
` [PATCH v3 4/7] netfilter: ipset: exlude gc when resize is in progress
` [PATCH v3 5/7] netfilter: ipset: make sure gc is properly stopped
` [PATCH v3 6/7] netfilter: ipset: cleanup the add/del backlog when resize failed
` [PATCH v3 7/7] netfilter: ipset: rework cidr bookkeeping
` [syzbot ci] Re: netfilter: ipset fixes, second batch

[PATCH nf,v2] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
 2026-06-17 11:51 UTC 

[PATCH nf] netfilter: nft_set_pipapo: don't leak bad clone into future transaction
 2026-06-17  8:02 UTC  (3+ messages)

[PATCH nf] netfilter: nfnetlink: make OOM conditions fatal
 2026-06-16 19:16 UTC 

[PATCH nf,v1] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
 2026-06-16 18:34 UTC 

[PATCH nf-next v3 0/4] netfilter: replace u_int*_t with kernel int types
 2026-06-16 18:29 UTC  (5+ messages)
` [PATCH nf-next v3 1/4] netfilter: nf_nat_ftp: replace u_int16_t with u16
` [PATCH nf-next v3 2/4] netfilter: nf_nat_irc: "
` [PATCH nf-next v3 3/4] netfilter: nf_sockopt: replace u_int8_t with u8
` [PATCH nf-next v3 4/4] netfilter: xt_TCPOPTSTRIP: replace u_int8_t and u_int16_t with u8 and u16

[PATCH 5.10/5.15/6.1/6.6/6.12/6.18] ipvs: skip ipv6 extension headers for csum checks
 2026-06-16  6:30 UTC 

[PATCH net-next 00/11] Netfilter/IPVS updates for net-next
 2026-06-15 21:20 UTC  (14+ messages)
` [PATCH net-next 01/11] ipvs: Replace use of system_unbound_wq with system_dfl_long_wq
` [PATCH net-next 02/11] netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths
` [PATCH net-next 03/11] netfilter: nf_conncount: callers must hold rcu read lock
` [PATCH net-next 04/11] netfilter: nf_conncount: use per nf_conncount_data spinlocks
` [PATCH net-next 05/11] netfilter: nf_conncount: split count_tree_node rbtree walk into helper
` [PATCH net-next 06/11] netfilter: nf_conncount: add sequence counter to detect tree modifications
` [PATCH net-next 07/11] netfilter: nf_conncount: gc and rcu fixes
` [PATCH net-next 08/11] netfilter: conntrack: check NULL when retrieving ct extension
` [PATCH net-next 09/11] netfilter: flowtable: bail out if forward path cannot be discovered
` [PATCH net-next 10/11] ipvs: fix doc syntax for conn_max sysctl
` [PATCH net-next 11/11] netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them

[PATCH nf 0/1] netfilter: xt_nat: bridge nft_compat rule can trigger NULL-deref
 2026-06-15 18:16 UTC  (10+ messages)
` [PATCH nf 1/1] netfilter: xt_nat: reject unsupported target families

[PATCH nf] netfilter: nft_compat: ebtables emulation must reject non-bridge targets
 2026-06-15 18:10 UTC 

[PATCH nf-next v2 0/6] netfilter: replace u_int*_t with kernel int types
 2026-06-15 13:38 UTC  (7+ messages)
` [PATCH nf-next v2 1/6] netfilter: nf_nat_ftp: replace u_int16_t with u16
` [PATCH nf-next v2 2/6] netfilter: nf_nat_irc: "
` [PATCH nf-next v2 3/6] netfilter: nf_sockopt: replace u_int8_t with u8
` [PATCH nf-next v2 4/6] netfilter: xt_DSCP: "
` [PATCH nf-next v2 5/6] netfilter: xt_TCPOPTSTRIP: replace u_int8_t and u_int16_t with u8 and u16
` [PATCH nf-next v2 6/6] netfilter: nf_log: replace u_int8_t with u8

[PATCH nf v2] netfilter: flowtable: fix and simplify IP6IP6 tunnel handling
 2026-06-15  9:18 UTC 

[netfilter-nf-next:for-netdev-nf-next-26-06-14 3/11] net/netfilter/nf_conncount.c:502:18: sparse: sparse: incompatible types in comparison expression (different address spaces):
 2026-06-15  0:38 UTC 

[PATCH 6.6.y] netfilter: ctnetlink: ensure safe access to master conntrack
 2026-06-14 22:28 UTC  (4+ messages)

[PATCH net-next] netfilter: x_tables.h: fix all kernel-doc warnings
 2026-06-14  5:25 UTC 

[PATCH] kdoc: xforms_lists: handle DECLARE_PER_CPU() in kernel-doc
 2026-06-14  5:24 UTC 

[PATCH v2 net-next 0/2] netdevsim: add fake FT/CLS_FLOWER offload
 2026-06-13 17:40 UTC  (4+ messages)
` [PATCH v2 net-next 1/2] netdevsim: tc: allow to test nf_tables offload control plane code
` [PATCH v2 net-next 2/2] selftests: netfilter: add phony nft_offload test

[PATCH 6.1.y] netfilter: ctnetlink: ensure safe access to master conntrack
 2026-06-13 14:51 UTC  (2+ messages)

[PATCH nf-next 0/6] netfilter: replace u_int*_t with kernel int types
 2026-06-12 12:51 UTC 

[PATCH nf-next 1/6] netfilter: nf_nat_ftp: replace u_int16_t with u16
 2026-06-12 12:40 UTC 

[PATCH nf-next 6/6] netfilter: nf_log: replace u_int8_t with u8
 2026-06-12 12:40 UTC 

[PATCH nf-next 3/6] netfilter: nf_sockopt: replace u_int8_t with u8
 2026-06-12 12:40 UTC 

[PATCH nf-next 4/6] netfilter: xt_DSCP: replace u_int8_t with u8
 2026-06-12 12:40 UTC 

[PATCH nf-next 5/6] netfilter: xt_TCPOPTSTRIP: replace u_int8_t and u_int16_t with u8 and u16
 2026-06-12 12:40 UTC 

[PATCH nf-next 2/6] netfilter: nf_nat_irc: replace u_int16_t with u16
 2026-06-12 12:40 UTC 

[PATCH nf-next] netfilter: conntrack: add deprecation warnings for irc and pptp trackers
 2026-06-12  6:03 UTC 

[PATCH net-next 0/2] netdevsim: add fake FT/CLS_FLOWER offload
 2026-06-11 23:12 UTC  (6+ messages)
` [PATCH net-next 1/2] netdevsim: tc: allow to test nf_tables offload control plane code
` [PATCH net-next 2/2] selftests: netfilter: add phony nft_offload test

[PATCH v2 0/9] netfilter: ipset fixes, second batch
 2026-06-11 19:47 UTC  (4+ messages)
` [PATCH v2 5/9] netfilter: ipset: exlude gc when resize is in progress

[PATCH nf v3] selftests: netfilter: conntrack_sctp_collision.sh: Introduce SCTP INIT collision test
 2026-06-11 14:50 UTC 

[nft PATCH v2] parser_bison: Fix for bison < 3.6
 2026-06-11 12:52 UTC 

[PATCH nf] netfilter: flowtable: use pskb_may_pull() in nf_flow_ip6_tunnel_proto()
 2026-06-11 11:03 UTC  (8+ messages)

[PATCH net v2] netfilter: nf_log: validate MAC header was set before dumping it
 2026-06-11 10:40 UTC  (2+ messages)

[PATCH net 1/8] netfilter: revalidate bridge ports
 2026-06-11 10:40 UTC  (2+ messages)

[PATCH net] netfilter: nft_synproxy: stop bypassing the priv->info snapshot
 2026-06-11  9:49 UTC  (3+ messages)

[PATCH nf 1/1] netfilter: xt_cluster: reject template conntracks in hash match
 2026-06-11  7:21 UTC 


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox