Linux Netfilter development
 help / color / mirror / Atom feed
 messages from 2026-08-19 22:18:16 to 2026-08-31 13:50:41 UTC [more...]

[PATCH AUTOSEL 6.18-5.10] netfilter: nf_conntrack_expect: zero at allocation time
 2026-08-31 13:30 UTC  (2+ messages)
` [PATCH AUTOSEL 6.18-5.10] netfilter: ipset: mark the rcu locked areas properly

[PATCH 6.1.y 6.6.y] netfilter: nft_set_pipapo: account mapping table allocation
 2026-08-31 12:04 UTC  (2+ messages)

[RESEND PATCH nf-next] netfilter: nf_conntrack_h323: fix double cursor advance in decode_int()
 2026-08-31  1:33 UTC 

[ANNOUNCE] A Syzbot-style Platform for Verifying and Fixing LLM-reported Bugs
 2026-08-30 11:55 UTC 

[PATCH nf 0/1] netfilter: nf_dup: prevent asynchronous duplicate recursion
 2026-08-29 12:20 UTC  (4+ messages)
` [PATCH nf 1/1] "

[PATCH 5.10/6.1] ipvs: reload ip header after head reallocation
 2026-08-29  3:34 UTC  (3+ messages)

[PATCH net v2 0/2] netlink: specs: fixes for conntrack dump filtering
 2026-08-28 23:00 UTC  (6+ messages)
` [PATCH net v2 1/2] netlink: specs: fix the conntrack filter type
` [PATCH net v2 2/2] netlink: specs: add missing mask attributes for conntrack dump

[PATCH nf v3 0/5] netfilter: ipset: rhashtable conversion
 2026-08-28 15:22 UTC  (6+ messages)
` [PATCH nf v3 1/5] netfilter: ipset: add rhashtable boilerplate stubs
` [PATCH nf v3 2/5] netfilter: ipset: add rhltable "
` [PATCH nf v3 3/5] netfilter: ipset: replace internal hash table with rhashtable
` [PATCH nf v3 4/5] netfilter: ipset: re-add forceadd support
` [PATCH nf v3 5/5] netfilter: ipset: also report mem size for cidr storage to userspace

[PATCH v2 nf] netfilter: disable br_netfilter in user namespaces
 2026-08-28 10:19 UTC  (2+ messages)

[nf PATCH] netfilter: nf_tables: Fix netdev hook sanity checks
 2026-08-27 20:48 UTC 

[nft PATCH] tests: shell: Test odd netdev hook updates
 2026-08-27 20:42 UTC 

[nf PATCH] netfilter: nfnetlink: Fix for interrupted hook dumps
 2026-08-27 20:38 UTC 

[PATCH net,v2 0/9] Netfilter fixes for net
 2026-08-27 20:20 UTC  (11+ messages)
` [PATCH net 1/9] netfilter: tproxy: use DEBUG_NET_WARN_ON_ONCE for protocol fallbacks
` [PATCH net 2/9] netfilter: conncount: use DEBUG_NET_WARN_ON_ONCE on reaching count limit
` [PATCH net 3/9] netfilter: nf_tables: move hardware offload step after building the chain blob
` [PATCH net 4/9] netfilter: nft_set_pipapo_avx2: add missing vzeroupper
` [PATCH net 5/9] netfilter: x_tables: remove pr_debug
` [PATCH net 6/9] netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited()
` [PATCH net 7/9] netfilter: nf_tables: skip double clone set expressions on element insert
` [PATCH net 8/9] netfilter: nf_tables: set on dead bit when performing early element removal
` [PATCH net 9/9] netfilter: nf_tables: remove leftover set_update_list

[PATCH nf] netfilter: disable br_netfilter in user namespaces
 2026-08-27 17:41 UTC 

[BUG] net/bridge: out-of-bounds in br_forward()
 2026-08-27 14:54 UTC  (4+ messages)

[BUG] net/bridge: wild access in br_handle_frame_finish()
 2026-08-27 12:42 UTC 

[PATCH nf v4] netfilter: nf_tables: fix device name and prefix match in hook lookup
 2026-08-27 10:32 UTC 

[PATCH nf v3] netfilter: nf_tables: fix device name and prefix match in hook lookup
 2026-08-27 10:19 UTC  (5+ messages)

[PATCH nft 1/3] segtree: assert on value expressions
 2026-08-27  9:03 UTC  (4+ messages)
` [PATCH nft 2/3] Revert "segtree: basic support for binary operations in concatenated set ranges"
` [PATCH nft 3/3] segtree: postpone bitmask to symbol conversion for interval sets

[PATCH nf] netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited()
 2026-08-27  0:09 UTC 

[PATCH nf,v2 1/2] netfilter: flowtable: defer ct stats sync via worker
 2026-08-26 23:32 UTC  (2+ messages)
` [PATCH nf 2/2] netfilter: flowtable: bump ct refcount before teardown

[PATCH net] netlink: specs: fix the conntrack filter type
 2026-08-26 20:24 UTC  (5+ messages)

[PATCH nf] net: netfilter: report NLM_F_DUMP_FILTERED when all is filtered out
 2026-08-26 16:42 UTC  (2+ messages)

[PATCH nf v2] netfilter: nf_tables: fix device name and prefix match in hook lookup
 2026-08-26 12:07 UTC  (7+ messages)

[PATCH nf] netfilter: nf_tables: fix device name and prefix match in hook lookup
 2026-08-26 10:32 UTC  (4+ messages)

[PATCH nf,v2] netfilter: x_tables: remove pr_debug
 2026-08-26  0:31 UTC 

[PATCH nf] netfilter: flowtable: defer ct stats sync via worker
 2026-08-25 23:50 UTC 

[PATCH nf] netfilter: lwtunnel: expose read-only sysctl nf_hooks_lwtunnel for non init-netns
 2026-08-25 22:30 UTC  (3+ messages)

[PATCH net v2] netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race
 2026-08-25 20:02 UTC 

[PATCH nft] payload: restore is_raw flag for th expressions parsed from udata
 2026-08-25 19:10 UTC 

[PATCH RFC v3 00/13] sysctl: add module aliases
 2026-08-25 19:10 UTC  (10+ messages)
` [PATCH RFC v3 03/13] sysctl, mod_devicetable: add macro MODULE_SYSCTL_TABLE

[PATCH v2 nf 0/5] netfilter: ipset: rhashtable conversion
 2026-08-25 14:28 UTC  (7+ messages)
` [PATCH v2 nf 1/5] netfilter: ipset: add rhashtable boilerplate stubs
` [PATCH v2 nf 2/5] netfilter: ipset: add rhltable "
` [PATCH v2 nf 3/5] netfilter: ipset: replace internal hash table with rhashtable
` [PATCH v2 nf 4/5] netfilter: ipset: re-add forceadd support
` [PATCH v2 nf 5/5] netfilter: ipset: also report mem size for cidr storage to userspace

[PATCH nf] netfilter: ip6_tables: set F_PROTO when proto value is nonzero
 2026-08-25 13:11 UTC 

[PATCH nft] tests: shell: Add coverage for nf_connlabels_replace()
 2026-08-25 10:45 UTC  (2+ messages)

[PATCH nf] netfilter: arp_tables: remove the 32bit compat interface
 2026-08-25 10:28 UTC 

[PATCH] netfilter: nft_nat: fully initialise new_addr in netmap setup
 2026-08-25  9:10 UTC 

[PATCH nf] netfilter: nfnetlink_queue: hold nfnl mutex in event notifier
 2026-08-25  1:36 UTC 

[PATCH nf] netfilter: nfnetlink_log: cope with concurrent instance destruction
 2026-08-25  1:36 UTC 

[PATCH nf-next] netfilter: x_tables: reject missing '-p' flag and check for INV flag
 2026-08-24 22:24 UTC  (8+ messages)

[BUG] general protection fault in __instance_destroy
 2026-08-24 20:27 UTC  (2+ messages)

[PATCH nf] netfilter: nft_payload: restrict checksum offsets to known values
 2026-08-24 19:56 UTC  (2+ messages)

[PATCH nf 0/5] netfilter: ipset: rhashtable conversion
 2026-08-24 16:03 UTC  (6+ messages)
` [PATCH nf 1/5] netfilter: ipset: add rhashtable boilerplate stubs
` [PATCH nf 2/5] netfilter: ipset: add rhltable "
` [PATCH nf 3/5] netfilter: ipset: replace internal hash table with rhashtable
` [PATCH nf 4/5] netfilter: ipset: re-add forceadd support
` [PATCH nf 5/5] netfilter: ipset: also report mem size for cidr storage to userspace

[PATCH 0/4] ipv4: start using dst_dev_rcu()
 2026-08-24 13:47 UTC  (6+ messages)
` [PATCH v6.1.y 1/4] net: dst: add four helpers to annotate data-races around dst->dev
` [PATCH v6.1.y 2/4] ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu]
` [PATCH v6.1.y 3/4] net: dst: introduce dst->dev_rcu
` [PATCH v6.1.y 4/4] ipv4: start using dst_dev_rcu()

[PATCH net 00/10] Netfilter fixes for net
 2026-08-24 12:19 UTC  (17+ messages)
` [PATCH net 01/10] netfilter: tproxy: use DEBUG_NET_WARN_ON_ONCE for protocol fallbacks
` [PATCH net 02/10] netfilter: conncount: use DEBUG_NET_WARN_ON_ONCE on reaching count limit
` [PATCH net 03/10] netfilter: nf_tables: move hardware offload step after building the chain blob
` [PATCH net 04/10] netfilter: nft_set_pipapo_avx2: add missing vzeroupper
` [PATCH net 05/10] netfilter: x_tables: remove pr_debug
` [PATCH net 06/10] netfilter: xt_cgroup: use pr_info_ratelimited()
` [PATCH net 07/10] netfilter: nf_tables: skip double clone set expressions on element insert
` [PATCH net 08/10] netfilter: nf_tables: fix device name and prefix match in hook lookup
` [PATCH net 09/10] netfilter: nf_tables: set on dead bit when performing early element removal
` [PATCH net 10/10] netfilter: nf_tables: remove leftover set_update_list

[PATCH net] netfilter: cttimeout: prevent UAF during module unload
 2026-08-24 12:12 UTC 

[PATCH] netfilter: flowtable: flush delete work after final GC
 2026-08-24 11:59 UTC  (2+ messages)

[PATCH net-next v2] netfilter: nf_conntrack_h323: fix double cursor advance in decode_int()
 2026-08-24  2:32 UTC 

[PATCH] netfilter: bpf: disallow conntrack kfuncs for token programs
 2026-08-23 19:40 UTC  (3+ messages)

[PATCH net v2] netfilter: nf_log: unregister loggers before per-net teardown
 2026-08-23 17:05 UTC 

[PATCH] netfilter: nf_log: clear per-net loggers on unregister
 2026-08-23 16:40 UTC  (3+ messages)

[PATCH nf v3 0/1] ipvs: bound LBLCR and LBLC cache growth
 2026-08-23 10:50 UTC  (3+ messages)
` [PATCH nf v3 1/1] "

[PATCH] netfilter: nf_conntrack: avoid truncating IPv6 nexthdr offset
 2026-08-22 21:40 UTC 

[PATCH nf-next 01/10] netfilter: x_tables: use GFP_KERNEL_ACCOUNT in match/target
 2026-08-21 14:38 UTC  (10+ messages)
` [PATCH nf-next 02/10] netfilter: nfnetlink: use GFP_KERNEL_ACCOUNT
` [PATCH nf-next 03/10] netfilter: nf_tables: "
` [PATCH nf-next 04/10] netfilter: synproxy: "
` [PATCH nf-next 05/10] netfilter: nf_log: "
` [PATCH nf-next 06/10] netfilter: ipset: "
` [PATCH nf-next 07/10] netfilter: lwtunnel: "
` [PATCH nf-next 08/10] netfilter: nat: "
` [PATCH nf-next 09/10] netfilter: ebtables: "
` [PATCH nf-next 10/10] netfilter: conncount: "

[PATCH nf v2] netfilter: nf_reject: initialize IPCB at inet ingress
 2026-08-21 13:42 UTC  (2+ messages)

[PATCH nf] netfilter: x_tables: require IP6T_F_PROTO when matching protocol
 2026-08-21 13:29 UTC 

[PATCH nf 1/2] netfilter: nf_tables: remove leftover set_update_list
 2026-08-21 11:19 UTC  (2+ messages)
` [PATCH nf 2/2] netfilter: nf_tables: set on dead bit when performing early element removal

[PATCH nf,v4] netfilter: nf_tables: skip double clone set expressions on element insert
 2026-08-21 11:17 UTC 

[PATCH net] netfilter: nf_conntrack_h323: fix double cursor advance in decode_int()
 2026-08-21 11:00 UTC  (2+ messages)

[PATCH nf 1/2] netfilter: nf_tables: skip double clone set expressions on element insert
 2026-08-21 10:49 UTC  (2+ messages)
` [PATCH nf 2/2] netfilter: nf_tables: set on dead bit when performing early element removal

[PATCH nf-next v2] netfilter: osf: remove unreachable break in nf_osf_ttl()
 2026-08-21  9:50 UTC 

[PATCH] netfilter: osf: remove unreachable break in nf_osf_ttl()
 2026-08-21  9:50 UTC  (3+ messages)

netfilter: nf_nat: race in nf_nat_setup_info() corrupts nat_bysource list (GPF / soft lockup)
 2026-08-21  5:46 UTC  (7+ messages)

[PATCH net-next 1/8] netfilter: validate L4 headers after userspace packet writes
 2026-08-20 19:20 UTC  (2+ messages)

[PATCH] netfilter: conntrack: fix nf_conntrack_expect_max default value in documentation
 2026-08-20 12:57 UTC 

[nft PATCH 0/2] parser_json: fix JSON delete of ct stateful objects
 2026-08-20 11:48 UTC  (3+ messages)
` [nft PATCH 1/2] parser_json: fix CMD_OBJ/NFT_OBJECT mismatch in delete path

[PATCH nft] json: output set/map element count
 2026-08-20 11:31 UTC  (2+ messages)

[PATCH nft] netlink_linearize: size nat register allocation by address expression
 2026-08-20 11:15 UTC  (2+ messages)

[PATCH net-next 0/8] Netfilter/IPVS fixes for net-next
 2026-08-20 10:34 UTC  (5+ messages)

[PATCH -stable 1/1] ipvs: separate destination availability state
 2026-08-20  4:19 UTC  (2+ messages)

[PATCH net] netfilter: ipset: list:set: defer ip_set_put_byindex to RCU callback
 2026-08-20  3:43 UTC  (3+ messages)

[PATCH nft v3] src: add connlimit stateful object support
 2026-08-19 22:18 UTC  (3+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox