messages from 2026-07-09 20:04:24 to 2026-07-22 21:14:39 UTC [more...]
[PATCH net 00/13] Netfilter/IPVS fixes for net
2026-07-22 21:14 UTC (8+ messages)
` [PATCH net 01/13] netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()
` [PATCH net 02/13] selftests: netfilter: nft_flowtable.sh: fix offload counter verification for tunnel tests
` [PATCH net 03/13] netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair()
` [PATCH net 04/13] netfilter: ipset: do not update comments from kernel-side hash adds
` [PATCH net 05/13] ipvs: do not propagate one-packet flag to synced conns
` [PATCH net 06/13] ipvs: adjust double hashing when fwd method changes
` [PATCH net 07/13] netfilter: nf_tables: make nft_object rhltable per table
[nft PATCH 0/6] Eliminate variable declarations in switch cases
2026-07-22 16:57 UTC (5+ messages)
` [nft PATCH 6/6] netlink: Call tunnel getters unconditionally
[PATCH net] netfilter: nf_conntrack_h323: fix get_bitmap() overread
2026-07-22 12:57 UTC
[PATCH nf v3 0/3] ipvs: csum validations and data offsets
2026-07-22 11:56 UTC (5+ messages)
` [PATCH nf v3 1/3] ipvs: fix the checksum validations
` [PATCH nf v3 2/3] ipvs: fix places with wrong packet offsets
` [PATCH nf v3 3/3] ipvs: do not mangle ICMP replies for non-first fragments
[PATCH nf] ipvs: clear the nfct flag under lock
2026-07-22 10:25 UTC
[PATCH nf-next] ipvs: use type-safe allocation helpers in ip_vs_rht_alloc
2026-07-22 10:23 UTC (3+ messages)
[PATCH net-next v2] net: ip6_tunnel: use tunnel parameters for fill_forward_path route lookup
2026-07-22 7:12 UTC
[PATCH nf,v3] netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH
2026-07-22 5:56 UTC (2+ messages)
[PATCH nf,v2] netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH
2026-07-21 20:32 UTC
[PATCH nf] netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH
2026-07-21 20:20 UTC
[PATCH net-next] net: ip6_tunnel: use tunnel parameters for fill_forward_path route lookup
2026-07-21 10:54 UTC (2+ messages)
[PATCH net-next] net: ipip: use tunnel parameters for fill_forward_path route lookup
2026-07-21 10:40 UTC (2+ messages)
[SECURITY] net/netfilter/xt_hashlimit: Uninitialized rateinfo.burst read via shared table mode confusion (CWE-457)
2026-07-21 7:56 UTC
[PATCH] netfilter: xt_hashlimit: fix uninitialized rateinfo.burst read on shared table
2026-07-21 7:46 UTC
[PATCH nf v2 0/2] ipvs: csum validations and data offsets
2026-07-21 6:19 UTC (4+ messages)
` [PATCH nf v2 1/2] ipvs: fix the checksum validations
` [PATCH nf v2 2/2] ipvs: fix places with wrong packet offsets
[PATCH nf] netfilter: nft_payload: fix mask build for partial field offload
2026-07-19 22:15 UTC
[PATCH iptables] nft: fix out-of-bounds read listing an old-revision match
2026-07-17 18:59 UTC
[PATCH iptables] nft: bridge: fix among buffer overflow when set has no size
2026-07-17 18:56 UTC
[PATCH net 0/9] netfilter: updates for net
2026-07-17 17:41 UTC (14+ messages)
` [PATCH net 1/9] netfilter: xt_nat: reject unsupported target families
` [PATCH net 2/9] netfilter: ecache: fix inverted time_after() check
` [PATCH net 3/9] netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
` [PATCH net 4/9] netfilter: nf_conncount: fix zone comparison in tuple dedup
` [PATCH net 5/9] selftests: netfilter: add bridge tunnel flowtable regression
` [PATCH net 6/9] netfilter: flowtable: use correct direction to set up tunnel route
` [PATCH net 7/9] ipvs: reload ip header after head reallocation
` [PATCH net 8/9] ipvs: fix more places with wrong ipv6 transport offsets
` [PATCH net 9/9] netfilter: xt_physdev: masks are not c-strings
[PATCH nf,v3] netfilter: nf_tables: make nft_object rhltable per table
2026-07-17 11:06 UTC
[conntrack-tools] conntrack.8: Document --stats counters
2026-07-17 10:37 UTC (4+ messages)
[PATCH net v2] netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
2026-07-17 9:30 UTC (2+ messages)
[PATCH nf,v2] netfilter: nf_tables: make nft_object rhltable per table
2026-07-17 7:51 UTC
[PATCH RFC nf-next 00/12] netfilter: ipset: convert to rhashtable
2026-07-16 14:52 UTC (29+ messages)
` [PATCH RFC nf-next 01/12] netfilter: ipset: rework cidr bookkeeping
` [PATCH RFC nf-next 02/12] netfilter: ipset: rework cidr bookkeeping fixups
` [PATCH RFC nf-next 03/12] netfilter: ipset: add small wrappers for hash and bucket sizes
` [PATCH RFC nf-next 04/12] netfilter: ipset: add and use mtype_del_cidr_all helper
` [PATCH RFC nf-next 05/12] netfilter: ipset: add and use ip_set_init_comment_slow
` [PATCH RFC nf-next 06/12] netfilter: ipset: add and use ip_set_ext_destroy_slow
` [PATCH RFC nf-next 07/12] netfilter: ipset: add rhashtable boilerplate stubs
` [PATCH RFC nf-next 08/12] netfilter: ipset: replace internal hash table with rhashtable
` [PATCH RFC nf-next 09/12] netfilter: ipset: use plain rcu_read_lock
` [PATCH RFC nf-next 10/12] netfilter: ipset: use correct lockdep annotation in ipset_dereference
` [PATCH RFC nf-next 11/12] netfilter: ipset: remove last region lock usage
` [PATCH RFC nf-next 12/12] netfilter: ipset: re-add forceadd support for rhashtable
` [syzbot ci] Re: netfilter: ipset: convert to rhashtable
[PATCH nf] netfilter: nf_tables: make nft_object rhltable per netns
2026-07-16 14:39 UTC
[PATCH nft] tests: shell: add template match bug test
2026-07-16 9:10 UTC
[nft PATCH] tests: py: Fix --keep test runner option
2026-07-15 23:02 UTC
[PATCH nf] netfilter: conntrack: prevent helper extension relocation
2026-07-15 14:48 UTC
[PATCH nf v2] netfilter: ip6tables: set hotdrop for malformed extension header matches
2026-07-14 22:26 UTC (2+ messages)
[PATCH nf v3 0/2] ipvs: fix destination overload state updates
2026-07-14 14:22 UTC (5+ messages)
` [PATCH nf v3 1/2] ipvs: properly update the overload flag on dest edit
` [PATCH nf v3 2/2] ipvs: use bitops for destination overload state
[PATCH v2 1/2] ipvs: do not propagate one-packet flag to synced conns
2026-07-14 10:14 UTC (4+ messages)
` [PATCH v2 2/2] ipvs: adjust double hashing when fwd method changes
Dear netfilter-devel, project info
2026-07-14 5:26 UTC
[PATCH nf] netfilter: nft_fib: bail out if input device is missing
2026-07-13 21:33 UTC (3+ messages)
[PATCH v12 nf-next 0/7] netfilter: Add bridge-fastpath
2026-07-13 16:37 UTC (7+ messages)
` [PATCH v12 nf-next 3/7] netfilter: nf_flow_table_offload: Add nf_flow_rule_bridge()
[PATCH nf-next v3] netfilter: ipset: skip extension destroy on hash resize replay
2026-07-13 16:33 UTC
[PATCH nf] netfilter: ipset: skip extension destroy on hash resize replay
2026-07-13 16:18 UTC (3+ messages)
[PATCH nf-next v2] netfilter: ipset: skip extension destroy on hash resize replay
2026-07-13 16:15 UTC
[PATCH nf-next 1/2] netfilter: conntrack_helper: pass master conntrack to helper functions
2026-07-13 16:06 UTC (2+ messages)
` [PATCH nf-next 2/2] netfilter: nf_conntrack_expect: store event cache in expectation
[PATCH 01/13 RFC net-next] net: ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack
2026-07-13 14:57 UTC (6+ messages)
` [PATCH 12/13 RFC net-next] netfilter: ipv4: guard ip_route_me_harder() with CONFIG_IPV4
[PATCH ipset 0/7] test updates
2026-07-13 14:25 UTC (8+ messages)
` [PATCH ipset 4/7] tests: check_klog.sh: unclutter stderr
` [PATCH ipset 5/7] tests: setlist_ns.sh: use local ipset binary and don't rely on userns
` [PATCH ipset 6/7] tests: make setlist_resize.sh more verbose on error
` [PATCH ipset 7/7] tests: runtest.sh: add sendip emulation via scapy
[PATCH nf,v3] netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair()
2026-07-13 14:19 UTC
[PATCH libnflog] utils: add minimal nfnlog test case
2026-07-13 13:55 UTC
[PATCH nf] netfilter: ipset: do not update comments from kernel-side hash adds
2026-07-13 13:12 UTC (2+ messages)
[PATCH nf v2] selftests: netfilter: nft_flowtable.sh: fix offload counter verification for tunnel tests
2026-07-13 12:53 UTC
[PATCH nf-next v6 0/6] Add IPv4 over IPv6 and SIT flowtable SW acceleration
2026-07-13 12:46 UTC (7+ messages)
` [PATCH nf-next v6 1/6] net: netfilter: add ether_type to net_device_path_ctx
` [PATCH nf-next v6 2/6] net: netfilter: add encap_proto to flow_offload_tunnel
` [PATCH nf-next v6 3/6] net: netfilter: add IPv4 over IPv6 tunnel flowtable acceleration
` [PATCH nf-next v6 4/6] selftests: netfilter: nft_flowtable.sh: add IPv4 over IPv6 flowtable selftest
` [PATCH nf-next v6 5/6] net: netfilter: add SIT tunnel flowtable acceleration
` [PATCH nf-next v6 6/6] selftests: netfilter: nft_flowtable.sh: add SIT flowtable selftest
[PATCH nf-next,v5] netfilter: flowtable: initial bridge support
2026-07-13 12:36 UTC
[PATCH nf,v2] netfilter: flowtable: tear down flow entries with stale dst from GC
2026-07-13 11:46 UTC (6+ messages)
[PATCH RFC net-next v3 0/3] net: sysctl: Const Qualify sysctl ctl_table arrays
2026-07-13 11:07 UTC (4+ messages)
` [PATCH RFC net-next v3 1/3] net: enforce net sysctl registration
` [PATCH RFC net-next v3 2/3] net: Const qualify ctl_tables that kmemdup unconditionally
` [PATCH RFC net-next v3 3/3] net: Const qualify network templated ctl_tables Arrays
[PATCH nf-next,v4] netfilter: flowtable: initial bridge support
2026-07-13 8:42 UTC
[PATCH nf-next,v2 0/3] initial flowtable bridge support
2026-07-13 8:24 UTC (12+ messages)
` [PATCH nf-next,v2 1/3] net: pass net_device_path_ctx struct to dev_fill_forward_path()
` [PATCH nf-next,v2 2/3] net: expose dev_fwd_path() helper via static inline
` [PATCH nf-next,v2 3/3] netfilter: flowtable: initial bridge support
[PATCH nf] netfilter: ip6tables: set hotdrop for malformed extension header matches
2026-07-13 3:10 UTC (3+ messages)
[PATCH nf] netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()
2026-07-12 23:42 UTC
[PATCH nf,v2] netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair()
2026-07-12 23:37 UTC
[PATCH nf,v3] netfilter: flowtable: initial bridge support
2026-07-12 23:21 UTC (2+ messages)
[PATCH nf-next,v3] netfilter: flowtable: initial bridge support
2026-07-12 23:20 UTC
[PATCH nf] netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair()
2026-07-12 23:06 UTC
[PATCH nf-next,v1 1/4] bridge: Add filling forward path from port to port
2026-07-12 9:56 UTC (2+ messages)
netfilter: nf_nat_sip expectation UAF permits local privilege escalation
2026-07-12 8:40 UTC (10+ messages)
` [PATCH nf] netfilter: nf_nat: do not reuse an unexpected expectation on RTCP clash
` panic_on_warn and lack of lesser-WARN (was: Re: [PATCH nf] netfilter: nf_nat: do not reuse an unexpected expectation on RTCP clash)
[PATCH nf v2 1/2] netfilter: nf_nat: stop reusing DEAD RTP expectations
2026-07-12 7:32 UTC (2+ messages)
` [PATCH nf v2 2/2] netfilter: nf_conntrack_expect: reject reinsertion of DEAD expectations
[PATCH nf] ipvs: fix the checksum validations
2026-07-11 17:17 UTC (4+ messages)
[PATCH nf] ipvs: make destination flags atomic
2026-07-11 14:09 UTC (5+ messages)
[PATCH nf] selftests: netfilter: nft_flowtable.sh: check offload counters for IP6IP6 tunnel test
2026-07-11 13:55 UTC
[RFC] VEGA: a syzbot-like workflow for LLM-found kernel bugs
2026-07-11 5:33 UTC (4+ messages)
[nf-next PATCH v3 0/4] Address Sashiko review of NAT hook dump code
2026-07-10 15:14 UTC (5+ messages)
` [nf-next PATCH v3 1/4] netfilter: nfnetlink_hook: Pass cb object to nfnl_hook_dump_nat()
` [nf-next PATCH v3 2/4] netfilter: nfnetlink_hook: Address hook ops using READ_ONCE()
` [nf-next PATCH v3 3/4] netfilter: nfnetlink_hook: Handle multipart NAT hook dumps
` [nf-next PATCH v3 4/4] netfilter: nfnetlink_hook: Fix for concurrent NAT hooks dump and change
[PATCH net v3] netfilter: nf_nat: recalculate TCP TS offset after SNAT port rewrite
2026-07-10 13:30 UTC
[nft PATCH] mnl: support RLIMIT_NOFILE soft limit > FD_SETSIZE
2026-07-10 11:40 UTC (2+ messages)
[PATCH nf] netfilter: x_physdev: masks are not c-strings
2026-07-10 10:47 UTC
[PATCH nf] netfilter: flowtable: tear down HW offloaded flows on FIB route changes
2026-07-10 7:46 UTC (4+ messages)
` [syzbot ci] "
[PATCH nf-next] netfilter: flowtable: tear down flow entries with stale dst from GC
2026-07-10 7:45 UTC (2+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox