messages from 2026-08-05 17:20:38 to 2026-08-14 21:10:14 UTC [more...]
[PATCH nft] tests: shell: use an unassigned protocol number in exclusive_start_cond
2026-08-14 21:10 UTC (3+ messages)
[PATCH nft] evaluate: reject negative values for unsigned datatypes
2026-08-14 21:10 UTC (4+ messages)
[PATCH net-next 00/12] Netfilter updates for net
2026-08-14 19:50 UTC (25+ messages)
` [PATCH net-next 01/12] netfilter: add DEBUG_NET_WARN_ON_ONCE to skb_set_nfct()
` [PATCH net-next 02/12] net: pass net_device_path_ctx to dev_fill_forward_path()
` [PATCH net-next 03/12] net: netfilter: add ether_type to net_device_path_ctx and use it
` [PATCH net-next 04/12] netfilter: flowtable: rename tun.l3_proto to tun.inner_proto
` [PATCH net-next 05/12] netfilter: flowtable: rename ctx.tun.proto to ctx.tun.inner_proto
` [PATCH net-next 06/12] netfilter: flowtable: store ethertype in flowtable context
` [PATCH net-next 07/12] netfilter: flowtable: move ipv4 and ipv6 xmit path to function
` [PATCH net-next 08/12] netfilter: flowtable: detach layer 2 encapsulation parser from lookup
` [PATCH net-next 09/12] netfilter: nft_ct: move custom expectation support to helper
` [PATCH net-next 10/12] netfilter: conntrack: always lower timeout for non-closing RST packets
` [PATCH net-next 11/12] netfilter: nf_conntrack_expect: bail out on insert dead expectations
` [PATCH net-next 12/12] selftests: netfilter: conntrack_dump_flush: remove unused variables and fix typo
[PATCH net v2] netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()
2026-08-14 19:25 UTC
[PATCH] netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()
2026-08-14 19:17 UTC
[PATCH v2 ipvs] ipvs: fix integer overflow in ftp helper port/address parsing
2026-08-14 16:44 UTC (2+ messages)
[PATCH ipset] tests: runtest.sh: do kmemleak scan if available
2026-08-13 23:04 UTC
[PATCH 0/7] Change skb secmarks to x-array indexes
2026-08-13 20:48 UTC (7+ messages)
` [PATCH 1/7] net, smack: Create a function to set secmarks
` [PATCH 2/7] LSM: Implement x array functions for secmarks
` [PATCH 3/7] LSM: Two hooks for manipulating struct lsm_prop
` [PATCH 4/7] SELinux: hooks for secctx_to_lsmprop and update_lsmprop
` [PATCH 5/7] Smack: "
` [PATCH 6/7] Apparmor: "
[PATCH] ipvs: fix integer overflow in ftp helper port/address parsing
2026-08-13 17:40 UTC (2+ messages)
[PATCH] netfilter: nf_conntrack_h323: fix OOB read in get_bitmap()
2026-08-13 14:16 UTC (2+ messages)
[nft PATCH 0/2] tests: shell: Keep dumps with numeric protocol values
2026-08-13 14:00 UTC (8+ messages)
` [nft PATCH 1/2] tests: shell: Use --numeric-protocol for dumps
` [nft PATCH 2/2] tests: shell: Convert dumps to numeric protocols
[PATCH nf,v2 1/2] netfilter: nf_tables: move set_update_list to nftables per-netns
2026-08-13 13:00 UTC (2+ messages)
` [PATCH nf,v2 2/2] netfilter: nf_tables: call set ops .commit when building new ruleset blob
[PATCH nf,v2] netfilter: flowtable: add and use NF_FLOW_CONFIRMED bit
2026-08-13 12:52 UTC
[PATCH v4 0/3] net: sysctl: Const Qualify sysctl ctl_table arrays
2026-08-13 11:40 UTC (6+ messages)
` [PATCH v4 1/3] net: enforce net sysctl registration
` [PATCH v4 2/3] net: Const qualify ctl_tables that kmemdup unconditionally
` [PATCH v4 3/3] net: Const qualify network templated ctl_tables Arrays
[PATCH nf,RESEND] netfilter: nf_tables: move hardware offload step after building the chain blob
2026-08-13 0:16 UTC
[PATCH nf] netfilter: flowtable: add and use NF_FLOW_CONFIRMED bit
2026-08-13 0:12 UTC
[PATCH nf] netfilter: nf_tables: move hardware offload step after building the chain blob
2026-08-12 23:51 UTC
[PATCH nf-next] netfilter: ctnetlink: do not expose expectation DEAD flag
2026-08-12 23:33 UTC
[PATCH nf 1/2] netfilter: nf_tables: move set_update_list to nftables per-netns
2026-08-12 23:04 UTC (2+ messages)
` [PATCH nf 2/2] netfilter: nf_tables: call set ops .commit when building new ruleset blob
[PATCH net 00/13] Netfilter/IPVS fixes for net
2026-08-12 1:40 UTC (18+ messages)
` [PATCH net 01/13] netfilter: ipset: fix refcount race between list:set GC and swap
` [PATCH net 02/13] netfilter: bridge: release template ct on non-IP path
` [PATCH net 03/13] ipvs: add totalconns for dest
` [PATCH net 04/13] ipvs: properly update the overload flag on dest edit
` [PATCH net 05/13] ipvs: separate destination availability state
` [PATCH net 06/13] netfilter: nf_conntrack: defer invalid log until after unlock
` [PATCH net 07/13] netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state
` [PATCH net 08/13] ipvs: clear IPv4 options after rebasing tunnel ICMP errors
` [PATCH net 09/13] ipvs: revalidate ihl to prevent out-of-bounds access
` [PATCH net 10/13] netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
` [PATCH net 11/13] netfilter: flowtable: publish GC-visible tuple last
` [PATCH net 12/13] netfilter: ipset: fix list type element drift bug
` [PATCH net 13/13] netfilter: ipset: let destroy callbacks adjust ext mem size
[nf_tables] rbtree interval set: in one batch, re-adding element E0 makes deleting an unrelated interval E1 fail with -ENOENT
2026-08-12 1:10 UTC (3+ messages)
[PATCH nf,v2 1/2] netfilter: nf_tables: move set_update_list to nftables per-netns
2026-08-12 0:30 UTC (9+ messages)
` [PATCH nf,v2 2/2] netfilter: nf_tables: call set ops .commit when building new ruleset
[PATCH net] netfilter: nf_dup_netdev: scrub duplicates to preserve the direct path
2026-08-11 23:19 UTC (4+ messages)
[PATCH 00/36] treewide: remove conditional returns with no effect
2026-08-11 18:51 UTC (3+ messages)
` (subset) "
[PATCH] ipvs: fix reversed sequence option serialization
2026-08-11 17:12 UTC
[PATCH] ipvs: reject invalid states in connection template sync records
2026-08-11 17:10 UTC
[nf_tables] netdev chain: DELCHAIN with an exact device name matches a prefix hook and deletes the chain
2026-08-11 16:40 UTC (2+ messages)
[nft PATCH 0/2] parser_json: fix JSON delete of ct stateful objects
2026-08-11 13:43 UTC (3+ messages)
` [nft PATCH 1/2] parser_json: fix CMD_OBJ/NFT_OBJECT mismatch in delete path
` [nft PATCH 2/2] tests: shell: add JSON delete test for ct stateful objects
[nf_tables] pipapo: inserting an interval that strictly contains an existing one is accepted; rbtree rejects the same insert
2026-08-11 11:37 UTC (7+ messages)
[PATCH] netfilter: nft_ct: validate timeout object protocol
2026-08-10 22:21 UTC (2+ messages)
[PATCH] netfilter: nf_conntrack: validate template helper protocol
2026-08-10 22:16 UTC
[PATCH nf v2] netfilter: nf_reject: initialize IPCB at inet ingress
2026-08-10 16:07 UTC
[PATCH nf] netfilter: ipset: remove need to allocate memory on delete operations
2026-08-10 15:10 UTC (4+ messages)
[PATCH nf] netfilter: ipset: fix list type element drift bug
2026-08-10 13:04 UTC (6+ messages)
[PATCH nf] netfilter: nf_tables: don't queue packet path object notifications
2026-08-10 11:35 UTC
[PATCH nf-next] netfilter: nf_conntrack_expect: bail out on insert dead expectations
2026-08-10 10:34 UTC
[PATCH nf-next] netfilter: conntrack: always lower timeout for non-closing RST packets
2026-08-10 8:37 UTC
[PATCH nf-next,v4] netfilter: nft_ct: move custom expectation support to helper
2026-08-10 7:09 UTC
[PATCH net v2] selftests: netfilter: conntrack_dump_flush: remove unused variables and fix typo
2026-08-10 3:01 UTC (5+ messages)
[PATCH nf 0/7] netfilter: switch ipset to rhashtable
2026-08-09 14:14 UTC (11+ messages)
` [PATCH nf 1/7] netfilter: ipset: remove need to allocate memory on delete operations
` [PATCH nf 2/7] netfilter: ipset: let destroy callbacks adjust ext mem size
` [PATCH nf 3/7] netfilter: ipset: add rhashtable boilerplate stubs
` [PATCH nf 4/7] netfilter: ipset: add rhltable "
` [PATCH nf 5/7] netfilter: ipset: replace internal hash table with rhashtable
` [PATCH nf 6/7] netfilter: ipset: re-add forceadd support for rhashtable
` [PATCH nf 7/7] netfilter: ipset: also report mem size for cidr storage to userspace
` [syzbot ci] Re: netfilter: switch ipset to rhashtable
[PATCH nf v4] netfilter: ipset: remove need to allocate memory on delete operations operations
2026-08-09 13:36 UTC (3+ messages)
[PATCH nf] netfilter: ipset: let destroy callbacks adjust ext mem size
2026-08-09 12:59 UTC (3+ messages)
[PATCH nf] netfilter: ipset: let destroy callbacks adjust ext mem size
2026-08-09 11:20 UTC (2+ messages)
[PATCH nf 0/5] netfilter: ipset fixes and rhastable prep work
2026-08-09 10:55 UTC (5+ messages)
[PATCH] netfilter: flowtable: publish GC-visible tuple last
2026-08-08 12:40 UTC
[PATCH nft] datatype: accept a numeric cgroupsv2 id on input
2026-08-08 1:27 UTC (6+ messages)
[PATCH nf-next,v3 1/2] netfilter: nf_conntrack_helper: remove synchronize_rcu() on helper removal
2026-08-07 12:13 UTC (2+ messages)
` [PATCH nf-next,v3 2/2] netfilter: nft_ct: move custom expectation support to helper
[PATCH nf-next] net: pass net_device_path_ctx to dev_fill_forward_path()
2026-08-07 10:36 UTC (2+ messages)
[PATCH nf-next 0/7] flowtable preparation for IPv4 over IPv6 and SIT
2026-08-07 9:15 UTC (14+ messages)
` [PATCH nf-next 1/7] net: pass net_device_path_ctx to dev_fill_forward_path()
` [PATCH nf-next 2/7] net: netfilter: add ether_type to net_device_path_ctx and use it
` [PATCH nf-next 3/7] netfilter: flowtable: rename tun.l3_proto to tun.inner_proto
` [PATCH nf-next 4/7] netfilter: flowtable: rename ctx.tun.proto to ctx.tun.inner_proto
` [PATCH nf-next 5/7] netfilter: flowtable: store ethertype in flowtable context
` [PATCH nf-next 6/7] netfilter: flowtable: move ipv4 and ipv6 xmit path to function
` [PATCH nf-next 7/7] netfilter: flowtable: detach layer 2 encapsulation parser from lookup
[PATCH nf v3] netfilter: ip6tables: set hotdrop for malformed extension header matches
2026-08-07 8:57 UTC (2+ messages)
[PATCH nf-next v4] netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers
2026-08-07 8:45 UTC
[PATCH nf v3] netfilter: ipset: remove need to allocate memory on delete operations
2026-08-06 20:22 UTC
[PATCH nft] netlink_linearize: size nat register allocation by address expression
2026-08-06 18:50 UTC
[PATCH v2 nf] netfilter: ipset: remove need to allocate memory on delete operations
2026-08-06 17:41 UTC
[PATCH net] netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
2026-08-06 16:11 UTC
[PATCH nf] ipvs: revalidate ihl to prevent out-of-bounds access
2026-08-06 10:52 UTC
[PATCH nf-next,v2] netfilter: add DEBUG_NET_WARN_ON_ONCE to skb_set_nfct()
2026-08-06 10:44 UTC (2+ messages)
[PATCH] selftests: netfilter: Remove unused variables in conntrack_dump_flush
2026-08-06 9:03 UTC (3+ messages)
[PATCH nf-next,v5] netfilter: flowtable: initial bridge support
2026-08-06 1:27 UTC (2+ messages)
[PATCH net] netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
2026-08-06 0:20 UTC (2+ messages)
[PATCH net-next 1/9] netfilter: conncount: normalize tuple and zone on successful ct lookup
2026-08-05 23:50 UTC (2+ messages)
[PATCH net 01/10] ipvs: stop estimator after disabled calc phase
2026-08-05 23:50 UTC (2+ messages)
[PATCH net 00/10] Netfilter/IPVS fixes for net
2026-08-05 23:21 UTC (3+ messages)
[PATCH nft v3] datatype: accept a numeric cgroupsv2 id on input
2026-08-05 21:10 UTC (2+ messages)
[PATCH net 03/10] netfilter: ipset: rework cidr bookkeeping
2026-08-05 19:17 UTC (4+ messages)
[PATCH net 02/10] netfilter: ebt_nflog: pin the NFLOG backend
2026-08-05 19:12 UTC (4+ messages)
[PATCH net-next 0/9] Netfilter updates for net-next
2026-08-05 17:40 UTC (2+ messages)
[PATCH net 10/10] netfilter: nft_ct: move custom expectation support to helper
2026-08-05 17:38 UTC (3+ messages)
[PATCH net 08/10] ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
2026-08-05 17:20 UTC (3+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox