Linux Netfilter development
 help / color / mirror / Atom feed
 messages from 2026-08-17 12:27:00 to 2026-08-24 22:19:08 UTC [more...]

[PATCH nf] netfilter: lwtunnel: expose read-only sysctl nf_hooks_lwtunnel for non init-netns
 2026-08-24 22:19 UTC 

[PATCH nf-next] netfilter: x_tables: reject missing '-p' flag and check for INV flag
 2026-08-24 22:18 UTC  (6+ messages)

[PATCH nft 1/3] segtree: assert on value expressions
 2026-08-24 21:29 UTC  (3+ messages)
` [PATCH nft 2/3] Revert "segtree: basic support for binary operations in concatenated set ranges"
` [PATCH nft 3/3] segtree: postpone bitmask to symbol conversion for interval sets

[PATCH RFC v3 00/13] sysctl: add module aliases
 2026-08-24 21:04 UTC  (20+ messages)
` [PATCH RFC v3 01/13] keys, pidns, fs/verity, riscv/vector: reorder '#include <linux/sysctl.h>'
` [PATCH RFC v3 02/13] proc: add config option SYSCTL_MODULE_ALIASES
` [PATCH RFC v3 03/13] sysctl, mod_devicetable: add macro MODULE_SYSCTL_TABLE
` [PATCH RFC v3 04/13] sysctl: add register_sysctl() wrapper for MODULE_SYSCTL_TABLE
` [PATCH RFC v3 05/13] sysctl, parport: update register_sysctl() callers with template arguments
` [PATCH RFC v3 06/13] sysctl, net: add register_net_sysctl{_sz}() wrappers for MODULE_SYSCTL_TABLE
` [PATCH RFC v3 07/13] sysctl, net: update register_net_sysctl{_sz}() callers with template arguments
` [PATCH RFC v3 08/13] sysctl, net: update register_net_sysctl_sz(ARRAY_SIZE(table_tmpl)) "
` [PATCH RFC v3 09/13] sysctl, ipv6: update register_net_sysctl{_sz}() callers "
` [PATCH RFC v3 10/13] sysctl, net: update register_net_sysctl_sz() edge case
` [PATCH RFC v3 11/13] sysctl: unrandomize struct ctl_table.procname
` [PATCH RFC v3 12/13] modpost: move addend_*_rel() calls into addend_rel()
` [PATCH RFC v3 13/13] modpost: handle MODULE_SYSCTL_TABLE symbols

[BUG] general protection fault in __instance_destroy
 2026-08-24 20:27 UTC  (2+ messages)

[PATCH nf] netfilter: nft_payload: restrict checksum offsets to known values
 2026-08-24 19:56 UTC  (2+ messages)

[PATCH nf 0/5] netfilter: ipset: rhashtable conversion
 2026-08-24 16:03 UTC  (6+ messages)
` [PATCH nf 1/5] netfilter: ipset: add rhashtable boilerplate stubs
` [PATCH nf 2/5] netfilter: ipset: add rhltable "
` [PATCH nf 3/5] netfilter: ipset: replace internal hash table with rhashtable
` [PATCH nf 4/5] netfilter: ipset: re-add forceadd support
` [PATCH nf 5/5] netfilter: ipset: also report mem size for cidr storage to userspace

[PATCH 0/4] ipv4: start using dst_dev_rcu()
 2026-08-24 13:47 UTC  (6+ messages)
` [PATCH v6.1.y 1/4] net: dst: add four helpers to annotate data-races around dst->dev
` [PATCH v6.1.y 2/4] ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu]
` [PATCH v6.1.y 3/4] net: dst: introduce dst->dev_rcu
` [PATCH v6.1.y 4/4] ipv4: start using dst_dev_rcu()

[PATCH nf v2] netfilter: nf_tables: fix device name and prefix match in hook lookup
 2026-08-24 12:59 UTC  (4+ messages)

[PATCH net 00/10] Netfilter fixes for net
 2026-08-24 12:19 UTC  (17+ messages)
` [PATCH net 01/10] netfilter: tproxy: use DEBUG_NET_WARN_ON_ONCE for protocol fallbacks
` [PATCH net 02/10] netfilter: conncount: use DEBUG_NET_WARN_ON_ONCE on reaching count limit
` [PATCH net 03/10] netfilter: nf_tables: move hardware offload step after building the chain blob
` [PATCH net 04/10] netfilter: nft_set_pipapo_avx2: add missing vzeroupper
` [PATCH net 05/10] netfilter: x_tables: remove pr_debug
` [PATCH net 06/10] netfilter: xt_cgroup: use pr_info_ratelimited()
` [PATCH net 07/10] netfilter: nf_tables: skip double clone set expressions on element insert
` [PATCH net 08/10] netfilter: nf_tables: fix device name and prefix match in hook lookup
` [PATCH net 09/10] netfilter: nf_tables: set on dead bit when performing early element removal
` [PATCH net 10/10] netfilter: nf_tables: remove leftover set_update_list

[PATCH net] netfilter: cttimeout: prevent UAF during module unload
 2026-08-24 12:12 UTC 

[PATCH] netfilter: flowtable: flush delete work after final GC
 2026-08-24 11:59 UTC  (2+ messages)

[PATCH net-next v2] netfilter: nf_conntrack_h323: fix double cursor advance in decode_int()
 2026-08-24  2:32 UTC 

[PATCH] netfilter: bpf: disallow conntrack kfuncs for token programs
 2026-08-23 19:40 UTC  (3+ messages)

[PATCH net v2] netfilter: nf_log: unregister loggers before per-net teardown
 2026-08-23 17:05 UTC 

[PATCH] netfilter: nf_log: clear per-net loggers on unregister
 2026-08-23 16:40 UTC  (3+ messages)

[PATCH nf v3 0/1] ipvs: bound LBLCR and LBLC cache growth
 2026-08-23 10:50 UTC  (3+ messages)
` [PATCH nf v3 1/1] "

[PATCH] netfilter: nf_conntrack: avoid truncating IPv6 nexthdr offset
 2026-08-22 21:40 UTC 

[PATCH nf-next 01/10] netfilter: x_tables: use GFP_KERNEL_ACCOUNT in match/target
 2026-08-21 14:38 UTC  (10+ messages)
` [PATCH nf-next 02/10] netfilter: nfnetlink: use GFP_KERNEL_ACCOUNT
` [PATCH nf-next 03/10] netfilter: nf_tables: "
` [PATCH nf-next 04/10] netfilter: synproxy: "
` [PATCH nf-next 05/10] netfilter: nf_log: "
` [PATCH nf-next 06/10] netfilter: ipset: "
` [PATCH nf-next 07/10] netfilter: lwtunnel: "
` [PATCH nf-next 08/10] netfilter: nat: "
` [PATCH nf-next 09/10] netfilter: ebtables: "
` [PATCH nf-next 10/10] netfilter: conncount: "

[PATCH nf v2] netfilter: nf_reject: initialize IPCB at inet ingress
 2026-08-21 13:42 UTC  (2+ messages)

[PATCH nf] netfilter: x_tables: require IP6T_F_PROTO when matching protocol
 2026-08-21 13:29 UTC 

[PATCH nf 1/2] netfilter: nf_tables: remove leftover set_update_list
 2026-08-21 11:19 UTC  (2+ messages)
` [PATCH nf 2/2] netfilter: nf_tables: set on dead bit when performing early element removal

[PATCH nf,v4] netfilter: nf_tables: skip double clone set expressions on element insert
 2026-08-21 11:17 UTC 

[PATCH net] netfilter: nf_conntrack_h323: fix double cursor advance in decode_int()
 2026-08-21 11:00 UTC  (2+ messages)

[PATCH nf 1/2] netfilter: nf_tables: skip double clone set expressions on element insert
 2026-08-21 10:49 UTC  (2+ messages)
` [PATCH nf 2/2] netfilter: nf_tables: set on dead bit when performing early element removal

[PATCH nf-next v2] netfilter: osf: remove unreachable break in nf_osf_ttl()
 2026-08-21  9:50 UTC 

[PATCH] netfilter: osf: remove unreachable break in nf_osf_ttl()
 2026-08-21  9:50 UTC  (3+ messages)

netfilter: nf_nat: race in nf_nat_setup_info() corrupts nat_bysource list (GPF / soft lockup)
 2026-08-21  5:46 UTC  (7+ messages)

[PATCH net-next 0/8] Netfilter/IPVS fixes for net-next
 2026-08-20 19:20 UTC  (15+ messages)
` [PATCH net-next 1/8] netfilter: validate L4 headers after userspace packet writes
` [PATCH net-next 2/8] netfilter: ipset: remove need to allocate memory on delete operations
` [PATCH net-next 3/8] netfilter: nf_tables: don't queue packet path object notifications
` [PATCH net-next 4/8] netfilter: nf_conntrack_expect: consolidate check for insertion of dead expectation
` [PATCH net-next 5/8] netfilter: ctnetlink: do not expose expectation DEAD flag
` [PATCH net-next 6/8] netfilter: nf_tables: move set_update_list to nftables per-netns
` [PATCH net-next 7/8] netfilter: nf_tables: call set ops .commit when building new ruleset blob
` [PATCH net-next 8/8] ipvs: fix integer overflow in ftp helper port/address parsing

[PATCH] netfilter: conntrack: fix nf_conntrack_expect_max default value in documentation
 2026-08-20 12:57 UTC 

[nft PATCH 0/2] parser_json: fix JSON delete of ct stateful objects
 2026-08-20 11:48 UTC  (3+ messages)
` [nft PATCH 1/2] parser_json: fix CMD_OBJ/NFT_OBJECT mismatch in delete path

[PATCH nft] json: output set/map element count
 2026-08-20 11:31 UTC  (2+ messages)

[PATCH nft] netlink_linearize: size nat register allocation by address expression
 2026-08-20 11:15 UTC  (2+ messages)

[PATCH -stable 0/1] ipvs: backport cdcc4e46180d
 2026-08-20  4:19 UTC  (3+ messages)
` [PATCH -stable 1/1] ipvs: separate destination availability state

[PATCH net] netfilter: ipset: list:set: defer ip_set_put_byindex to RCU callback
 2026-08-20  3:43 UTC  (3+ messages)

[PATCH nft v3] src: add connlimit stateful object support
 2026-08-19 22:18 UTC  (3+ messages)

[PATCH nf,v3] netfilter: nf_tables: skip double clone set expressions on element insert
 2026-08-19 13:46 UTC 

[PATCH nf,v2] netfilter: nf_tables: skip double clone set expressions on element insert
 2026-08-19 13:44 UTC 

[PATCH nf] netfilter: nf_tables: skip double clone set expressions on element insert
 2026-08-19 13:09 UTC 

[PATCH 1/2 nf-next] netfilter: seqadj: do not take ct lock if seqadj is NULL
 2026-08-19 10:24 UTC  (2+ messages)
` [PATCH 2/2 nf-next] netfilter: synproxy: fix reset of ct seqadj when reopening a connection

[PATCH RFC v2 00/13] sysctl: add module aliases
 2026-08-19  2:28 UTC  (14+ messages)
` [PATCH RFC v2 01/13] keys, pidns, fs/verity, riscv/vector: reorder '#include <linux/sysctl.h>'
` [PATCH RFC v2 02/13] proc: add config option SYSCTL_MODULE_ALIASES
` [PATCH RFC v2 03/13] sysctl, mod_devicetable: add macro MODULE_SYSCTL_TABLE
` [PATCH RFC v2 04/13] sysctl: add register_sysctl() wrapper for MODULE_SYSCTL_TABLE
` [PATCH RFC v2 05/13] sysctl, parport: update register_sysctl() callers with template arguments
` [PATCH RFC v2 06/13] sysctl, net: add register_net_sysctl{_sz}() wrappers for MODULE_SYSCTL_TABLE
` [PATCH RFC v2 07/13] sysctl, net: update register_net_sysctl{_sz}() callers with template arguments
` [PATCH RFC v2 08/13] sysctl, net: update register_net_sysctl_sz(ARRAY_SIZE(table_tmpl)) "
` [PATCH RFC v2 09/13] sysctl, ipv6: update register_net_sysctl{_sz}() callers "
` [PATCH RFC v2 10/13] sysctl, net: update register_net_sysctl_sz() edge case
` [PATCH RFC v2 11/13] sysctl: unrandomize struct ctl_table.procname
` [PATCH RFC v2 12/13] modpost: move addend_*_rel() calls into addend_rel()
` [PATCH RFC v2 13/13] modpost: handle MODULE_SYSCTL_TABLE symbols

[PATCH nf] netfilter: nft_dynset: missing .clone_destroy call when honoring set expression
 2026-08-18 22:31 UTC 

[PATCH] netfilter: flowtable: publish HW_DEAD after worker is done
 2026-08-18 20:00 UTC 

[PATCH nf-next 1/4] netfilter: x_tables: remove pr_debug in matches/targets
 2026-08-18 14:08 UTC  (9+ messages)
` [PATCH nf-next 2/4] netfilter: xt_CT: check for nul-terminated timeout and helper name
` [PATCH nf-next 3/4] netfilter: x_tables: do not print specified table
` [PATCH nf-next 4/4] netfilter: xt_cgroup: use pr_info_ratelimited()

[PATCH net v3] netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()
 2026-08-18 13:31 UTC 

[PATCH nf] netfilter: nf_tables: fix device name and prefix match in hook lookup
 2026-08-18 10:18 UTC 

[PATCH nf 0/1] netfilter: xt_IDLETIMER: fix out-of-bounds heap read in checkentry
 2026-08-18 10:14 UTC  (5+ messages)
` [PATCH nf 1/1] netfilter: xt_IDLETIMER: validate label before debug logging "

[PATCH net v2] netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()
 2026-08-17 23:36 UTC  (2+ messages)

[PATCH net] netfilter: nf_conntrack_h323: fix get_bitmap() overread
 2026-08-17 22:50 UTC  (2+ messages)

[PATCH 0/9] lib/folio_pool: Direct-Map Large Folio Pool & Scratchpad bump allocators
 2026-08-17 21:01 UTC  (13+ messages)
` [PATCH 1/9] lib/folio_pool: Introduce "
` [PATCH 2/9] netfilter/nf_tables: Add folio_scratchpad collector to struct nftables_pernet
` [PATCH 3/9] bpf/verifier: Route verifier stack state node allocations to folio_pool
` [PATCH 4/9] drm/gpuvm: Route gpuva_op allocations to folio_scratchpad
` [PATCH 5/9] bpf/syscall: Route generic_map_update_batch key/value "
` [PATCH 6/9] locking/lockdep: Fallback to folio_pool in alloc_list_entry when static pool is full
` [PATCH 7/9] locking/lockdep: Traverse adjacency lists directly in zap_class()
` [PATCH 8/9] locking/lockdep: Shrink static list_entries array to early bootstrap buffer
` [PATCH 9/9] locking/lockdep: Migrate and compact boot-time dependency graph from __initdata

[PATCH 0/6] x86: add missing vzeroupper instructions
 2026-08-17 17:18 UTC  (6+ messages)

[PATCH nf,v3 1/4] netfilter: flowtable: add and use NF_FLOW_CONFIRMED bit to skip GC
 2026-08-17 16:47 UTC  (4+ messages)
` [PATCH nf,v3 2/4] netfilter: flowtable: do not expose expired flows via lookup function
` [PATCH nf,v3 3/4] netfilter: flowtable: serialize IPS_OFFLOAD bit clearing
` [PATCH nf,v3 4/4] netfilter: flowtable: let GC handle partially set up flow

[PATCH nf 0/1] netfilter: xt_TPROXY: require IPv6 protocol match
 2026-08-17 16:11 UTC  (5+ messages)
` [PATCH nf 1/1] "

[PATCH nf 0/1] netfilter: xt_string: account textsearch configs
 2026-08-17 15:48 UTC  (3+ messages)
` [PATCH nf 1/1] "

[PATCH nf v2 0/1] ipvs: bound LBLCR and LBLC cache growth
 2026-08-17 12:41 UTC  (2+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox