messages from 2026-06-18 15:18:52 to 2026-06-30 04:53:31 UTC [more...]
[PATCH net 0/9] netfilter: updates for net
2026-06-30 4:52 UTC (5+ messages)
` [PATCH net 1/9] netfilter: nf_conntrack_expect: zero at allocation time
` [PATCH net 2/9] netfilter: nft_set_pipapo: don't leak bad clone into future transaction
` [PATCH net 3/9] netfilter: ipset: fix race between dump and ip_set_list resize
` [PATCH net 4/9] netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
[PATCH nf] netfilter: nf_conntrack_expect: zero at allocation time
2026-06-29 22:21 UTC (4+ messages)
[PATCH net] netfilter: nf_nat_masquerade: recalculate TCP TS offset when port is randomized
2026-06-29 21:10 UTC (4+ messages)
[PATCH nf 0/3] flowtable fixes for ipip tunnels
2026-06-29 15:17 UTC (7+ messages)
` [PATCH nf 1/3] netfilter: flowtable: use dst in this direction when pushing IPIP header
` [PATCH nf 2/3] netfilter: flowtable: IPIP tunnel hardware offload is not yet support
` [PATCH nf 3/3] netfilter: flowtable: support IPIP tunnel with direct xmit
[PATCH nf-next] netfilter: nft_ct: support expectation creation for natted flows
2026-06-29 13:46 UTC
[PATCH nf-next v2 0/3] netfilter: conntrack: remove obsolete module parameters
2026-06-29 12:58 UTC (4+ messages)
` [PATCH nf-next v2 1/3] netfilter: nf_conntrack_helper: do not hash by tuple
` [PATCH nf-next v2 2/3] netfilter: conntrack: get rid of tuple in helper definitions
` [PATCH nf-next v2 3/3] netfilter: conntrack: remove obsolete module parameters
[PATCH 0/5] netfilter: nf_flow_table_path: L2 bridge offload
2026-06-29 12:56 UTC (7+ messages)
` [PATCH 1/5] net: export __dev_fill_forward_path
` [PATCH 2/5] net: bridge: add flow offload helpers
` [PATCH 3/5] netfilter: nf_flow_table_path: add L2 bridge offload
` [PATCH 4/5] netfilter: nf_flow_table_path: handle DEV_PATH_MTK_WDMA in path info
` [PATCH 5/5] netfilter: nf_flow_table_path: add VLAN passthrough support
[BUG] netfilter: nft_fib: NULL-ptr-deref (GPF) in nft_fib6_eval on netdev egress hook
2026-06-29 10:53 UTC (7+ messages)
` [PATCH nf] netfilter: nft_fib: reject fib expression on the "
` [PATCH nf v2] "
[PATCH nf 1/1] netfilter: xt_u32: reject invalid shift counts
2026-06-28 8:05 UTC
[PATCH 1/1] ipvs: preserve conn hash flags when late-binding dest
2026-06-28 5:44 UTC (3+ messages)
[PATCH] netfilter: x_tables: replace strlcat() with snprintf()
2026-06-27 21:16 UTC (2+ messages)
[PATCH] minor spelling and grammar fixes in doc
2026-06-27 11:10 UTC (3+ messages)
[PATCH nf 1/1] netfilter: nf_conntrack_sip: guard against missing skb dst
2026-06-27 3:37 UTC (4+ messages)
` "
OpenWRT bounty for strong host behavior
2026-06-26 21:23 UTC
[PATCH nf-next 0/3] netfilter: conntrack: remove obsolete module parameters
2026-06-26 12:31 UTC (4+ messages)
` [PATCH nf-next 1/3] netfilter: nf_conntrack_helper: do not hash by tuple
` [PATCH nf-next 2/3] netfilter: conntrack: get rid of tuple in helper definitions
` [PATCH nf-next 3/3] netfilter: conntrack: remove obsolete module parameters
[nft PATCH 0/6] Eliminate variable declarations in switch cases
2026-06-26 11:53 UTC (3+ messages)
` [nft PATCH 6/6] netlink: Call tunnel getters unconditionally
[PATCH nf] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master
2026-06-26 11:40 UTC
[PATCH nf] netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
2026-06-26 11:24 UTC
[PATCH nf-next v2 0/3] netfilter: replace u_int*_t with kernel int types (batch 2)
2026-06-25 17:25 UTC (4+ messages)
` [PATCH nf-next v2 1/3] netfilter: nf_conntrack_h323_main: replace u_int8_t with u8
` [PATCH nf-next v2 2/3] netfilter: nf_conntrack_amanda: replace u_int16_t with u16
` [PATCH nf-next v2 3/3] netfilter: ip_vs_nfct: replace u_int8_t with u8
[PATCH nf-next] netfilter: remove redundant null check before kvfree()
2026-06-25 13:31 UTC
[PATCH nf 3/3] netfilter: xt_tcpmss: add checkentry for parameter validation
2026-06-25 8:44 UTC
[PATCH nf 1/3] netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
2026-06-25 8:44 UTC
[PATCH nf 2/3] netfilter: xt_dscp: add checkentry for tos match
2026-06-25 8:43 UTC
[PATCH nf 0/3] netfilter: xtables match fixes
2026-06-25 8:43 UTC
[PATCH nf] netfilter: ipset: fix race between dump and ip_set_list resize
2026-06-25 7:21 UTC (2+ messages)
[PATCH net 00/14] Netfilter fixes for net
2026-06-25 3:00 UTC (16+ messages)
` [PATCH net 01/14] netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()
` [PATCH net 02/14] netfilter: nf_conncount: prevent connlimit drops for early confirmed ct
` [PATCH net 03/14] netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto()
` [PATCH net 04/14] netfilter: x_tables.h: fix all kernel-doc warnings
` [PATCH net 05/14] netfilter: nft_synproxy: stop bypassing the priv->info snapshot
` [PATCH net 06/14] selftests: netfilter: conntrack_sctp_collision.sh: Introduce SCTP INIT collision test
` [PATCH net 07/14] netfilter: nft_compat: ebtables emulation must reject non-bridge targets
` [PATCH net 08/14] selftests: nft_queue.sh: add a bridge queue test
` [PATCH net 09/14] netfilter: ctnetlink: do not allow to reset helper on existing conntrack
` [PATCH net 10/14] netfilter: conntrack: add deprecation warnings for irc and pptp trackers
` [PATCH net 11/14] netfilter: nf_conntrack_expect: store master_tuple in expectation
` [PATCH net 12/14] netfilter: nf_conntrack_expect: run expectation eviction with no helper
` [PATCH net 13/14] netfilter: nft_ct: expectation timeouts are passed in milliseconds
` [PATCH net 14/14] netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration
[PATCH nf] netfilter: nft_set_pipapo: don't leak bad clone into future transaction
2026-06-24 21:31 UTC (6+ messages)
[PATCH nf-next 0/4] netfilter: replace u_int*_t with kernel int types (batch 2)
2026-06-24 21:00 UTC (6+ messages)
` [PATCH nf-next 1/4] netfilter: nf_conntrack_sane: replace u_int16_t with u16
` [PATCH nf-next 2/4] netfilter: nf_conntrack_h323_main: replace u_int8_t with u8
` [PATCH nf-next 3/4] netfilter: nf_conntrack_amanda: replace u_int16_t with u16
` [PATCH nf-next 4/4] netfilter: ip_vs_nfct: replace u_int8_t with u8
[PATCH nft] tests: shell: add tunnel vxlan test
2026-06-24 16:12 UTC
[PATCH 5.10] netfilter: nf_log: validate MAC header was set before dumping it
2026-06-24 11:51 UTC
[PATCH bpf-next v8 0/7] bpf: add icmp_send kfunc
2026-06-24 11:45 UTC (17+ messages)
` [PATCH bpf-next v8 1/7] net: move netfilter nf_reject_fill_skb_dst to core ipv4
` [PATCH bpf-next v8 2/7] net: move netfilter nf_reject6_fill_skb_dst to core ipv6
` [PATCH bpf-next v8 3/7] bpf: add bpf_icmp_send kfunc
` [PATCH bpf-next v8 4/7] selftests/bpf: add bpf_icmp_send kfunc cgroup_skb tests
` [PATCH bpf-next v8 5/7] selftests/bpf: add bpf_icmp_send kfunc cgroup_skb IPv6 tests
` [PATCH bpf-next v8 6/7] selftests/bpf: add bpf_icmp_send kfunc tc tests
` [PATCH bpf-next v8 7/7] selftests/bpf: add bpf_icmp_send recursion test
[PATCH 1/7 nft v3] src: add tunnel template support
2026-06-24 10:44 UTC (7+ messages)
` [PATCH 3/7 nft v3] src: add tunnel statement and expression support
[PATCH] kdoc: xforms_lists: handle DECLARE_PER_CPU() in kernel-doc
2026-06-23 20:41 UTC (2+ messages)
[PATCH nft,v2 0/5] support for several list and reset commands
2026-06-23 17:21 UTC (6+ messages)
` [PATCH nft,v2 1/5] libnftables: add nft_run_cmd_release() helper and use it
` [PATCH nft,v2 2/5] libnftables: split nft_run_cmd_from_buffer() in helper functions
` [PATCH nft,v2 3/5] libnftables: use nft_run_cmds() in nft_run_cmd_from_filename()
` [PATCH nft,v2 4/5] src: allow reset commands in batch with list and get commands only
` [PATCH nft,v2 5/5] libnftables: support for several reset commands
[PATCH] libmnl: add MNL_TYPE_UARR for devlink u64 array attributes
2026-06-23 11:08 UTC (5+ messages)
` RE:: "
` : "
` [EXTERNAL] "
[PATCH nf,v2] netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration
2026-06-23 10:41 UTC
[PATCH v2 v6.6-v6.1] netfilter: nf_tables: always walk all pending catchall elements
2026-06-23 6:14 UTC
[PATCH nf,v1 1/4] netfilter: ctnetlink: do not allow to reset helper on existing conntrack
2026-06-23 5:46 UTC (4+ messages)
` [PATCH nf,v1 2/4] netfilter: nf_conntrack_expect: store master_tuple in expectation
` [PATCH nf,v1 3/4] netfilter: nf_conntrack_expect: run expectation eviction with no helper
` [PATCH nf,v1 4/4] netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration
[PATCH nf] netfilter: nft_ct: expectation timeouts are passed in milliseconds
2026-06-23 5:30 UTC
[PATCH bpf-next v2 0/2] bpf: Guard conntrack opts error writes
2026-06-22 23:10 UTC (2+ messages)
[PATCH nf,RESEND] netfilter: nf_conntrack_expect: store master_tuple in expectation
2026-06-22 22:02 UTC
[PATCH nf] netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration
2026-06-22 19:49 UTC
[PATCH nf] netfilter: nf_conntrack_expect: store master_tuple in expectation
2026-06-22 19:36 UTC
[PATCH nf] netfilter: nf_conntrack_expect: run expectation eviction with no helper
2026-06-22 19:36 UTC
[PATCH net,v2 00/14] Netfilter fixes for net
2026-06-22 17:40 UTC (17+ messages)
` [PATCH net 01/14] netfilter: flowtable: fix offloaded ct timeout never being extended
` [PATCH net 02/14] netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst
` [PATCH net 03/14] netfilter: xt_cluster: reject template conntracks in hash match
` [PATCH net 04/14] netfilter: flowtable: fix and simplify IP6IP6 tunnel handling
` [PATCH net 05/14] netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
` [PATCH net 06/14] netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types
` [PATCH net 07/14] netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
` [PATCH net 08/14] netfilter: ipset: make sure gc is properly stopped
` [PATCH net 09/14] netfilter: nft_payload: reject offsets exceeding 65535 bytes
` [PATCH net 10/14] netfilter: nft_meta_bridge: add validate callback for get operations
` [PATCH net 11/14] netfilter: nft_flow_offload: zero device address for non-ether case
` [PATCH net 12/14] netfilter: nf_reject: skip iphdr options when looking for icmp header
` [PATCH net 13/14] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
` [PATCH net 14/14] netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
[Kernel Bug] INFO: task hung in xt_find_table
2026-06-22 12:33 UTC (5+ messages)
[PATCH nf] netfilter: ctnetlink: do not allow to reset helper on existing conntrack
2026-06-22 11:57 UTC
[PATCH nf v3 1/2] netfilter: nf_flow_table: separate tunnel route state from direct xmit
2026-06-22 10:10 UTC (2+ messages)
` [PATCH nf v3 2/2] selftests: netfilter: add bridge tunnel flowtable regression
[PATCH v2] netfilter: TCPMSS: fix dropped packets when MSS option is unaligned
2026-06-21 19:46 UTC (3+ messages)
` [PATCH nf-next v3] netfilter: TCPMSS: handle packets with unaligned MSS option
[regression] Network failure beyond first connection after 69894e5b4c5e ("netfilter: nft_connlimit: update the count if add was skipped")
2026-06-20 22:32 UTC (11+ messages)
` Bug#1130336: "
[PATCH net 00/16] Netfilter fixes for net
2026-06-20 22:28 UTC (18+ messages)
` [PATCH net 01/16] netfilter: flowtable: fix offloaded ct timeout never being extended
` [PATCH net 02/16] netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst
` [PATCH net 03/16] netfilter: xt_cluster: reject template conntracks in hash match
` [PATCH net 04/16] netfilter: flowtable: fix and simplify IP6IP6 tunnel handling
` [PATCH net 05/16] netfilter: nfnetlink: make OOM conditions fatal
` [PATCH net 06/16] netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
` [PATCH net 07/16] netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types
` [PATCH net 08/16] netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
` [PATCH net 09/16] netfilter: ipset: make sure gc is properly stopped
` [PATCH net 10/16] netfilter: nft_payload: reject offsets exceeding 65535 bytes
` [PATCH net 11/16] netfilter: nft_meta_bridge: add validate callback for get operations
` [PATCH net 12/16] netfilter: nft_flow_offload: zero device address for non-ether case
` [PATCH net 13/16] netfilter: nf_reject: skip iphdr options when looking for icmp header
` [PATCH net 14/16] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
` [PATCH net 15/16] netfilter: nf_conntrack_expect: store master_tuple in expectation
` [PATCH net 16/16] netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
[PATCH v6.1 0/3] Fix CVE-2026-23272
2026-06-20 11:54 UTC (5+ messages)
` [PATCH v6.1 1/3] netfilter: nf_tables: always increment set element count
` [PATCH v6.1 2/3] netfilter: nf_tables: fix set size with rbtree backend
` [PATCH v6.1 3/3] netfilter: nf_tables: unconditionally bump set->nelems before insertion
[PATCH v6.6-v6.1] netfilter: nf_tables: always walk all pending catchall elements
2026-06-20 11:54 UTC (2+ messages)
[PATCH 1/1] netfilter: nf_tables_offload: drop device refcount on error
2026-06-19 9:18 UTC (2+ messages)
[PATCH nf] netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
2026-06-18 22:34 UTC
[PATCH 0/9 nf-next] netfilter: replace raw warnings with
2026-06-18 20:38 UTC (7+ messages)
` [PATCH 4/9 nf-next] netfilter: conntrack: use DEBUG_NET_WARN_ON_ONCE on packet paths
[PATCH nf] netfilter: nf_conntrack_expect: store master_tuple in expectation
2026-06-18 16:31 UTC
[PATCH nf] netfilter: nft_payload: reject offsets exceeding 65535 bytes
2026-06-18 15:18 UTC (2+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox