Linux Netfilter development
 help / color / mirror / Atom feed
 messages from 2026-07-30 11:06:36 to 2026-08-07 09:10:07 UTC [more...]

[PATCH nf-next 0/7] flowtable preparation for IPv4 over IPv6 and SIT
 2026-08-07  9:10 UTC  (12+ messages)
` [PATCH nf-next 1/7] net: pass net_device_path_ctx to dev_fill_forward_path()
` [PATCH nf-next 2/7] net: netfilter: add ether_type to net_device_path_ctx and use it
` [PATCH nf-next 3/7] netfilter: flowtable: rename tun.l3_proto to tun.inner_proto
` [PATCH nf-next 4/7] netfilter: flowtable: rename ctx.tun.proto to ctx.tun.inner_proto
` [PATCH nf-next 5/7] netfilter: flowtable: store ethertype in flowtable context
` [PATCH nf-next 6/7] netfilter: flowtable: move ipv4 and ipv6 xmit path to function
` [PATCH nf-next 7/7] netfilter: flowtable: detach layer 2 encapsulation parser from lookup

[PATCH net v2] selftests: netfilter: conntrack_dump_flush: remove unused variables and fix typo
 2026-08-07  9:07 UTC  (2+ messages)

[PATCH nf v3] netfilter: ip6tables: set hotdrop for malformed extension header matches
 2026-08-07  8:57 UTC  (2+ messages)

[PATCH nf-next v4] netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers
 2026-08-07  8:45 UTC 

[PATCH nf v4] netfilter: ipset: remove need to allocate memory on delete operations operations
 2026-08-07  0:28 UTC 

[PATCH nf v3] netfilter: ipset: remove need to allocate memory on delete operations
 2026-08-06 20:22 UTC 

[PATCH 00/36] treewide: remove conditional returns with no effect
 2026-08-06 19:06 UTC  (2+ messages)
` (subset) "

[PATCH nft] netlink_linearize: size nat register allocation by address expression
 2026-08-06 18:50 UTC 

[PATCH nf,v2 1/2] netfilter: nf_tables: move set_update_list to nftables per-netns
 2026-08-06 18:01 UTC  (7+ messages)
` [PATCH nf,v2 2/2] netfilter: nf_tables: call set ops .commit when building new ruleset

[PATCH v2 nf] netfilter: ipset: remove need to allocate memory on delete operations
 2026-08-06 17:41 UTC 

[PATCH nf] netfilter: ipset: let destroy callbacks adjust ext mem size
 2026-08-06 16:52 UTC  (2+ messages)

[PATCH nf] netfilter: ipset: fix list type element drift bug
 2026-08-06 16:51 UTC  (2+ messages)

[PATCH net] netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
 2026-08-06 16:11 UTC 

[PATCH nf 0/7] netfilter: switch ipset to rhashtable
 2026-08-06 15:22 UTC  (9+ messages)
` [PATCH nf 1/7] netfilter: ipset: remove need to allocate memory on delete operations
` [PATCH nf 2/7] netfilter: ipset: let destroy callbacks adjust ext mem size
` [PATCH nf 3/7] netfilter: ipset: add rhashtable boilerplate stubs
` [PATCH nf 4/7] netfilter: ipset: add rhltable "
` [PATCH nf 5/7] netfilter: ipset: replace internal hash table with rhashtable
` [PATCH nf 6/7] netfilter: ipset: re-add forceadd support for rhashtable
` [PATCH nf 7/7] netfilter: ipset: also report mem size for cidr storage to userspace
` [syzbot ci] Re: netfilter: switch ipset to rhashtable

[PATCH nf] ipvs: revalidate ihl to prevent out-of-bounds access
 2026-08-06 10:52 UTC 

[PATCH nf-next,v2] netfilter: add DEBUG_NET_WARN_ON_ONCE to skb_set_nfct()
 2026-08-06 10:44 UTC  (2+ messages)

[PATCH] selftests: netfilter: Remove unused variables in conntrack_dump_flush
 2026-08-06  9:03 UTC  (3+ messages)

[PATCH nf-next,v5] netfilter: flowtable: initial bridge support
 2026-08-06  1:27 UTC  (2+ messages)

[PATCH net] netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
 2026-08-06  0:20 UTC  (3+ messages)

[PATCH net-next 0/9] Netfilter updates for net-next
 2026-08-05 23:50 UTC  (16+ messages)
` [PATCH net-next 1/9] netfilter: conncount: normalize tuple and zone on successful ct lookup
` [PATCH net-next 2/9] netfilter: flowtable: consolidate net_device field in nft_forward_info struct
` [PATCH net-next 3/9] netfilter: flowtable: consolidate flowtable device check
` [PATCH net-next 4/9] net: dsa: stop at the user device in .fill_forward_path
` [PATCH net-next 5/9] net: do not advance stack index from dev_fwd_path()
` [PATCH net-next 6/9] net: pass dst via net_device_path in dev_fill_forward_path()
` [PATCH net-next 7/9] netfilter: flowtable: release tunnel route on error when building forward path
` [PATCH net-next 8/9] netfilter: nf_tables: call skb_valid_dst() before skb_dst()
` [PATCH net-next 9/9] netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets

[PATCH net 00/10] Netfilter/IPVS fixes for net
 2026-08-05 23:50 UTC  (30+ messages)
` [PATCH net 01/10] ipvs: stop estimator after disabled calc phase
` [PATCH net 02/10] netfilter: ebt_nflog: pin the NFLOG backend
` [PATCH net 03/10] netfilter: ipset: rework cidr bookkeeping
` [PATCH net 04/10] netfilter: ipset: switch ext_size to atomic64_t
` [PATCH net 05/10] netfilter: ipset: add small wrappers for hash and bucket sizes
` [PATCH net 06/10] netfilter: ipset: add and use mtype_del_cidr_all helper
` [PATCH net 07/10] netfilter: ipset: switch to rcu work
` [PATCH net 08/10] ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
` [PATCH net 09/10] ipvs: return the csum validation for forward hook
` [PATCH net 10/10] netfilter: nft_ct: move custom expectation support to helper

[PATCH nft v3] datatype: accept a numeric cgroupsv2 id on input
 2026-08-05 21:10 UTC  (2+ messages)

nft_set_pipapo: UAF and double free from a stranded GC batch in the 5.15.y / 6.1.y / 6.6.y backports of 9df95785d3d8
 2026-08-05 16:41 UTC  (2+ messages)

[PATCH nft,v2 1/3] mergesort: use lhs expression when sorting concatenation
 2026-08-05 16:39 UTC  (3+ messages)
` [PATCH nft 2/3] segtree: basic support for binary operations in concatenated set ranges
` [PATCH nft 3/3] tests: shell: add flush set after expiration

[syzbot] [netfilter?] INFO: task hung in nfnetlink_rcv_msg (5)
 2026-08-05 14:42 UTC  (2+ messages)

[PATCH nf-next 1/2] netfilter: nf_tables: make move set_update_list to nftables per-netns
 2026-08-05 12:59 UTC  (2+ messages)
` [PATCH nf-next 2/2] netfilter: nf_tables: call set ops .commit when building new ruleset

[PATCH net] netfilter: nf_dup_netdev: scrub duplicates to preserve the direct path
 2026-08-05  9:02 UTC  (3+ messages)

[PATCH nf-next] net: pass net_device_path_ctx to dev_fill_forward_path()
 2026-08-05  8:53 UTC 

[PATCH] selftests: netfilter: add functional test for nft ct timeout policies
 2026-08-05  6:05 UTC 

[PATCH nf] netfilter: ipset: let destroy callbacks adjust ext mem size
 2026-08-04 17:02 UTC 

[PATCH nf] netfilter: ipset: remove need to allocate memory on delete operations
 2026-08-04 17:02 UTC 

[syzbot] [netfilter?] WARNING in nf_flow_offload_ip_hook
 2026-08-04 11:52 UTC  (2+ messages)

[PATCH nf] netfilter: nf_reject_ipv4: initialize IPCB at inet ingress
 2026-08-04 10:21 UTC  (2+ messages)

[PATCH nf v2] ipvs: clear IPv4 options after rebasing tunnel ICMP errors
 2026-08-04  7:54 UTC  (2+ messages)

[PATCH net v2] net: flow_offload: serialize driver callback lists
 2026-08-03 23:04 UTC  (3+ messages)

[PATCH nf] netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state
 2026-08-03 18:32 UTC  (2+ messages)

[PATCH nft] tests: shell: add packetpath test for nft ct expectation support
 2026-08-03 16:43 UTC 

[PATCH nft] test: shell: add regression test for 'ip fwd to' stack recursion
 2026-08-03 16:42 UTC 

[PATCH nf 0/5] netfilter: ipset fixes and rhastable prep work
 2026-08-03  8:55 UTC  (9+ messages)
` [PATCH nf 1/5] netfilter: ipset: rework cidr bookkeeping
` [PATCH nf 2/5] netfilter: ipset: switch ext_size to atomic64_t
` [PATCH nf 3/5] netfilter: ipset: add small wrappers for hash and bucket sizes
` [PATCH nf 4/5] netfilter: ipset: add and use mtype_del_cidr_all helper
` [PATCH nf 5/5] netfilter: ipset: switch to rcu work

[PATCH nf v4 1/1] netfilter: validate L4 headers after userspace packet writes
 2026-08-03  1:11 UTC 

[PATCH nf v4 0/3] ipvs: fix destination overload state updates
 2026-08-02 11:30 UTC  (5+ messages)
` [PATCH nf v4 1/3] ipvs: add totalconns for dest
` [PATCH nf v4 2/3] ipvs: properly update the overload flag on dest edit
` [PATCH nf v4 3/3] ipvs: separate destination availability state

[PATCH] ipvs: clear IPv4 options after rebasing tunnel ICMP errors
 2026-08-02  8:44 UTC  (2+ messages)

[syzbot] Monthly netfilter report (Aug 2026)
 2026-08-02  0:00 UTC 

[PATCH bpf v3] bpf: Fix netns reference imbalance in conntrack kfuncs
 2026-08-01 19:00 UTC  (4+ messages)

[PATCH nf v4 0/1] netfilter: nf_conntrack: defer invalid log until after unlock
 2026-08-01 14:27 UTC  (2+ messages)
` [PATCH nf v4 1/1] "

[PATCH nf 0/1] netfilter: ipset: serialize kernel-side put-byindex with swap
 2026-08-01 13:55 UTC  (3+ messages)
` [PATCH nf 1/1] "

[PATCH nf v3 1/1] netfilter: validate L4 headers after userspace packet writes
 2026-08-01 12:58 UTC  (2+ messages)

[PATCH nf v3 0/1] netfilter: nf_conntrack: defer invalid log until after unlock
 2026-08-01 11:23 UTC  (3+ messages)
` [PATCH nf v3 1/1] "

[stable request] Backport b2870fc21601 to 6.1.y, 6.6.y, 6.12.y, 6.18.y
 2026-08-01  1:40 UTC  (2+ messages)

[PATCH nf 0/1] netfilter: bridge: release template ct on non-IP path
 2026-07-31 23:41 UTC  (5+ messages)
` [PATCH nf 1/1] "

[PATCH] netfilter: nf_conntrack: prevent helper extension relocation
 2026-07-31 15:37 UTC  (2+ messages)

[PATCH nf] netfilter: conntrack: sctp: verify vtag before state changes
 2026-07-31 14:58 UTC  (5+ messages)

[PATCH nf-next] netfilter: conntrack: sctp: validate vtag before state changes
 2026-07-31 14:53 UTC 

[PATCH nft v2] datatype: accept a numeric cgroupsv2 id on input
 2026-07-31 12:41 UTC  (3+ messages)

[PATCH iptables] nft: fix out-of-bounds read listing an old-revision match
 2026-07-31 11:37 UTC  (2+ messages)

[PATCH iptables] nft: bridge: fix among buffer overflow when set has no size
 2026-07-31 11:33 UTC  (2+ messages)

[PATCH nf v2 0/2] netfilter: fix TCP conntrack invalid-log deadlock
 2026-07-31 10:26 UTC  (7+ messages)
` [PATCH nf v2 1/2] netfilter: nf_conntrack_tcp: defer timeout-lowering invalid log until after unlock
` [PATCH nf v2 2/2] netfilter: nf_conntrack_tcp: defer tcp_in_window invalid logging "

[PATCH nf-next] netfilter: add DEBUG_NET_WARN_ON_ONCE to skb_set_nfct()
 2026-07-31  9:53 UTC 

Backport request: "netfilter: nf_conntrack_expect: restore helper propagation via expectation"
 2026-07-30 19:38 UTC  (6+ messages)
` [PATCH 6.18.y] netfilter: nf_conntrack_expect: restore helper propagation via expectation
` [PATCH 6.1.y] "

[PATCH nf v3 0/2] ipvs: csum validations, part 2
 2026-07-30 18:35 UTC  (3+ messages)
` [PATCH nf v3 1/2] ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
` [PATCH nf v3 2/2] ipvs: return the csum validation for forward hook

[PATCH bpf] bpf: Fix netns reference imbalance in conntrack kfuncs
 2026-07-30 18:08 UTC  (3+ messages)
` [PATCH bpf v2] "

[PATCH nf,v2] netfilter: nft_ct: move custom expectation support to helper
 2026-07-30 15:03 UTC 

[PATCH nf v3 1/1] ipvs: stop estimator after disabled calc phase
 2026-07-30 14:44 UTC  (2+ messages)

[PATCH nf] netfilter: nft_ct: move custom expectation support to helper
 2026-07-30 13:49 UTC 

[PATCH nf-next,v2] netfilter: nf_tables: call skb_valid_dst() before skb_dst()
 2026-07-30 13:00 UTC  (2+ messages)

[PATCH nf v2 1/1] netfilter: validate L4 headers after userspace packet writes
 2026-07-30 11:34 UTC  (4+ messages)

[PATCH nf,v2] netfilter: nft_ct: postpone expectation creation to confirmed conntrack
 2026-07-30 11:26 UTC 


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox