Linux Netfilter development
 help / color / mirror / Atom feed
 messages from 2026-08-22 21:10:06 to 2026-09-02 15:52:06 UTC [more...]

[PATCH nf-next v2 1/2] netfilter: flowtable: carry a priority into the offload
 2026-09-02 15:51 UTC  (2+ messages)
` [PATCH nf-next v2 2/2] selftests: netfilter: nft_flowtable.sh: check the priority a flow carries

[ANNOUNCE] A Syzbot-style Platform for Verifying and Fixing LLM-reported Bugs
 2026-09-02 15:10 UTC  (4+ messages)

[nft PATCH] libnftables: Drop symbol nft_bison_have_extended_errors
 2026-09-02 13:16 UTC  (4+ messages)

[nf PATCH] netfilter: nf_tables: Fix netdev hook sanity checks
 2026-09-02 10:41 UTC  (3+ messages)

[PATCH net] net/ipv6: don't route packets with unknown source address
 2026-09-02 10:08 UTC  (4+ messages)
` [syzbot ci] "

[PATCH nf v3 0/5] netfilter: ipset: rhashtable conversion
 2026-09-02  7:42 UTC  (9+ messages)
` [PATCH nf v3 1/5] netfilter: ipset: add rhashtable boilerplate stubs
` [PATCH nf v3 2/5] netfilter: ipset: add rhltable "
` [PATCH nf v3 3/5] netfilter: ipset: replace internal hash table with rhashtable
` [PATCH nf v3 4/5] netfilter: ipset: re-add forceadd support
` [PATCH nf v3 5/5] netfilter: ipset: also report mem size for cidr storage to userspace

[RESEND PATCH nf-next] netfilter: nf_conntrack_h323: fix double cursor advance in decode_int()
 2026-09-02  4:35 UTC  (2+ messages)
` [RESEND,nf-next] "

[PATCH nf] netfilter: nf_nat: unregister and release hooks on error
 2026-09-01 21:55 UTC  (2+ messages)

[syzbot] Monthly netfilter report (Sep 2026)
 2026-09-01 20:33 UTC 

[ANNOUNCE] nftables 1.1.7 release
 2026-09-01 17:44 UTC 

[PATCH nf-next 0/6] net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload
 2026-09-01 16:32 UTC  (7+ messages)
` [PATCH nf-next 1/6] net: netfilter: nf_flow_table: recognize IPv4/IPv6 in tunnel proto matching
` [PATCH nf-next 2/6] net: netfilter: nf_flow_table: set inner protocol when popping tunnel header
` [PATCH nf-next 3/6] net: netfilter: nf_flow_table: populate tunnel tuple regardless of inner protocol
` [PATCH nf-next 4/6] net: netfilter: nf_flow_table: refactor MTU check for tunnel offload
` [PATCH nf-next 5/6] net: netfilter: add encap_proto to flow_offload_tunnel
` [PATCH nf-next 6/6] net: netfilter: nf_flow_table: unify tunnel push for IPv4 and IPv6

[nft PATCH] tests: shell: Test odd netdev hook updates
 2026-09-01 14:56 UTC  (4+ messages)

[PATCH nf 0/1] netfilter: x_tables: avoid holding mutex over faultable user copies
 2026-09-01 13:47 UTC  (2+ messages)
` [PATCH nf 1/1] "

[RFC] ipv6: preserving route lookup provenance in dst caches
 2026-09-01 12:24 UTC 

[PATCH nf-next] netfilter: flowtable: carry a priority into the offload
 2026-09-01 10:41 UTC  (3+ messages)

[PATCH 6.6.y 0/4] ipv4: start using dst_dev_rcu()
 2026-09-01  1:21 UTC  (6+ messages)
` [PATCH 6.6.y 1/4] net: dst: add four helpers to annotate data-races around dst->dev
` [PATCH 6.6.y 2/4] ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu]
` [PATCH 6.6.y 3/4] net: dst: introduce dst->dev_rcu
` [PATCH 6.6.y 4/4] ipv4: start using dst_dev_rcu()

[PATCH 6.1.y 6.6.y] netfilter: nft_set_pipapo: restore cloned mapping table memcg accounting
 2026-08-31 23:15 UTC  (3+ messages)

[PATCH 0/7] Change skb secmarks to x-array indexes
 2026-08-31 22:37 UTC  (8+ messages)
  ` [PATCH 1/7] net, smack: Create a function to set secmarks
  ` [PATCH 2/7] LSM: Implement x array functions for secmarks
  ` [PATCH 3/7] LSM: Two hooks for manipulating struct lsm_prop
  ` [PATCH 4/7] SELinux: hooks for secctx_to_lsmprop and update_lsmprop
  ` [PATCH 5/7] Smack: "
  ` [PATCH 6/7] Apparmor: "
  ` [PATCH 7/7] net, lsm: Change skb secmarks to x-array indexes

[PATCH 6.12,6.6,6.1,5.15,5.10] netfilter: nft_set_pipapo_avx2: add missing vzeroupper
 2026-08-31 19:48 UTC 

[PATCH 6.1.y 6.6.y] netfilter: nft_set_pipapo: account mapping table allocation
 2026-08-31 18:07 UTC  (3+ messages)
  ` [PATCH 6.1.y 6.6.y v2] netfilter: nf_tables: missing objects with no memcg accounting

[ANNOUNCE] libnftnl 1.3.2 release
 2026-08-31 17:39 UTC 

[PATCH 0/4] ipv4: start using dst_dev_rcu()
 2026-08-31 16:08 UTC  (4+ messages)
` [PATCH v6.1.y 4/4] "

[PATCH nf v3] netfilter: disable br_netfilter in user namespaces
 2026-08-31 15:26 UTC  (2+ messages)

[PATCH v2 nf] netfilter: disable br_netfilter in user namespaces
 2026-08-31 15:02 UTC  (4+ messages)

[PATCH AUTOSEL 6.18-5.10] netfilter: nf_conntrack_expect: zero at allocation time
 2026-08-31 13:31 UTC  (5+ messages)
` [PATCH AUTOSEL 6.18-5.10] netfilter: ipset: mark the rcu locked areas properly
` [PATCH AUTOSEL 6.18] netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths
` [PATCH AUTOSEL 6.18-5.10] netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()
` [PATCH AUTOSEL 6.18-5.15] netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state

[PATCH nf 0/1] netfilter: nf_dup: prevent asynchronous duplicate recursion
 2026-08-29 12:20 UTC  (4+ messages)
` [PATCH nf 1/1] "

[PATCH 5.10/6.1] ipvs: reload ip header after head reallocation
 2026-08-29  3:34 UTC  (3+ messages)

[PATCH net v2 0/2] netlink: specs: fixes for conntrack dump filtering
 2026-08-28 23:00 UTC  (6+ messages)
` [PATCH net v2 1/2] netlink: specs: fix the conntrack filter type
` [PATCH net v2 2/2] netlink: specs: add missing mask attributes for conntrack dump

[nf PATCH] netfilter: nfnetlink: Fix for interrupted hook dumps
 2026-08-27 20:38 UTC 

[PATCH net,v2 0/9] Netfilter fixes for net
 2026-08-27 20:20 UTC  (11+ messages)
` [PATCH net 1/9] netfilter: tproxy: use DEBUG_NET_WARN_ON_ONCE for protocol fallbacks
` [PATCH net 2/9] netfilter: conncount: use DEBUG_NET_WARN_ON_ONCE on reaching count limit
` [PATCH net 3/9] netfilter: nf_tables: move hardware offload step after building the chain blob
` [PATCH net 4/9] netfilter: nft_set_pipapo_avx2: add missing vzeroupper
` [PATCH net 5/9] netfilter: x_tables: remove pr_debug
` [PATCH net 6/9] netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited()
` [PATCH net 7/9] netfilter: nf_tables: skip double clone set expressions on element insert
` [PATCH net 8/9] netfilter: nf_tables: set on dead bit when performing early element removal
` [PATCH net 9/9] netfilter: nf_tables: remove leftover set_update_list

[PATCH nf] netfilter: disable br_netfilter in user namespaces
 2026-08-27 17:41 UTC 

[BUG] net/bridge: out-of-bounds in br_forward()
 2026-08-27 14:54 UTC  (4+ messages)

[BUG] net/bridge: wild access in br_handle_frame_finish()
 2026-08-27 12:42 UTC 

[PATCH nf v4] netfilter: nf_tables: fix device name and prefix match in hook lookup
 2026-08-27 10:32 UTC 

[PATCH nf v3] netfilter: nf_tables: fix device name and prefix match in hook lookup
 2026-08-27 10:19 UTC  (5+ messages)

[PATCH nft 1/3] segtree: assert on value expressions
 2026-08-27  9:03 UTC  (4+ messages)
` [PATCH nft 2/3] Revert "segtree: basic support for binary operations in concatenated set ranges"
` [PATCH nft 3/3] segtree: postpone bitmask to symbol conversion for interval sets

[PATCH nf] netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited()
 2026-08-27  0:09 UTC 

[PATCH nf,v2 1/2] netfilter: flowtable: defer ct stats sync via worker
 2026-08-26 23:32 UTC  (2+ messages)
` [PATCH nf 2/2] netfilter: flowtable: bump ct refcount before teardown

[PATCH net] netlink: specs: fix the conntrack filter type
 2026-08-26 20:24 UTC  (5+ messages)

[PATCH nf] net: netfilter: report NLM_F_DUMP_FILTERED when all is filtered out
 2026-08-26 16:42 UTC  (2+ messages)

[PATCH nf v2] netfilter: nf_tables: fix device name and prefix match in hook lookup
 2026-08-26 12:07 UTC  (7+ messages)

[PATCH nf] netfilter: nf_tables: fix device name and prefix match in hook lookup
 2026-08-26 10:32 UTC  (4+ messages)

[PATCH nf,v2] netfilter: x_tables: remove pr_debug
 2026-08-26  0:31 UTC 

[PATCH nf] netfilter: flowtable: defer ct stats sync via worker
 2026-08-25 23:50 UTC 

[PATCH nf] netfilter: lwtunnel: expose read-only sysctl nf_hooks_lwtunnel for non init-netns
 2026-08-25 22:30 UTC  (3+ messages)

[PATCH net v2] netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race
 2026-08-25 20:02 UTC 

[PATCH nft] payload: restore is_raw flag for th expressions parsed from udata
 2026-08-25 19:10 UTC 

[PATCH RFC v3 00/13] sysctl: add module aliases
 2026-08-25 19:10 UTC  (8+ messages)
` [PATCH RFC v3 03/13] sysctl, mod_devicetable: add macro MODULE_SYSCTL_TABLE

[PATCH v2 nf 0/5] netfilter: ipset: rhashtable conversion
 2026-08-25 14:28 UTC  (7+ messages)
` [PATCH v2 nf 1/5] netfilter: ipset: add rhashtable boilerplate stubs
` [PATCH v2 nf 2/5] netfilter: ipset: add rhltable "
` [PATCH v2 nf 3/5] netfilter: ipset: replace internal hash table with rhashtable
` [PATCH v2 nf 4/5] netfilter: ipset: re-add forceadd support
` [PATCH v2 nf 5/5] netfilter: ipset: also report mem size for cidr storage to userspace

[PATCH nf] netfilter: ip6_tables: set F_PROTO when proto value is nonzero
 2026-08-25 13:11 UTC 

[PATCH nft] tests: shell: Add coverage for nf_connlabels_replace()
 2026-08-25 10:45 UTC  (2+ messages)

[PATCH nf] netfilter: arp_tables: remove the 32bit compat interface
 2026-08-25 10:28 UTC 

[PATCH] netfilter: nft_nat: fully initialise new_addr in netmap setup
 2026-08-25  9:10 UTC 

[PATCH nf] netfilter: nfnetlink_queue: hold nfnl mutex in event notifier
 2026-08-25  1:36 UTC 

[PATCH nf] netfilter: nfnetlink_log: cope with concurrent instance destruction
 2026-08-25  1:36 UTC 

[PATCH nf-next] netfilter: x_tables: reject missing '-p' flag and check for INV flag
 2026-08-24 22:24 UTC  (8+ messages)

[BUG] general protection fault in __instance_destroy
 2026-08-24 20:27 UTC  (2+ messages)

[PATCH nf] netfilter: nft_payload: restrict checksum offsets to known values
 2026-08-24 19:56 UTC  (2+ messages)

[PATCH nf 0/5] netfilter: ipset: rhashtable conversion
 2026-08-24 16:03 UTC  (6+ messages)
` [PATCH nf 1/5] netfilter: ipset: add rhashtable boilerplate stubs
` [PATCH nf 2/5] netfilter: ipset: add rhltable "
` [PATCH nf 3/5] netfilter: ipset: replace internal hash table with rhashtable
` [PATCH nf 4/5] netfilter: ipset: re-add forceadd support
` [PATCH nf 5/5] netfilter: ipset: also report mem size for cidr storage to userspace

[PATCH net 07/10] netfilter: nf_tables: skip double clone set expressions on element insert
 2026-08-24 12:19 UTC  (3+ messages)

[PATCH net 05/10] netfilter: x_tables: remove pr_debug
 2026-08-24 12:17 UTC  (3+ messages)

[PATCH net] netfilter: cttimeout: prevent UAF during module unload
 2026-08-24 12:12 UTC 

[PATCH] netfilter: flowtable: flush delete work after final GC
 2026-08-24 11:59 UTC  (2+ messages)

[PATCH net-next v2] netfilter: nf_conntrack_h323: fix double cursor advance in decode_int()
 2026-08-24  2:32 UTC 

[PATCH] netfilter: bpf: disallow conntrack kfuncs for token programs
 2026-08-23 19:40 UTC  (3+ messages)

[PATCH net 08/10] netfilter: nf_tables: fix device name and prefix match in hook lookup
 2026-08-23 17:36 UTC  (3+ messages)

[PATCH net v2] netfilter: nf_log: unregister loggers before per-net teardown
 2026-08-23 17:05 UTC 

[PATCH] netfilter: nf_log: clear per-net loggers on unregister
 2026-08-23 16:40 UTC  (3+ messages)

[PATCH nf v3 0/1] ipvs: bound LBLCR and LBLC cache growth
 2026-08-23 10:50 UTC  (3+ messages)
` [PATCH nf v3 1/1] "

[PATCH] netfilter: nf_conntrack: avoid truncating IPv6 nexthdr offset
 2026-08-22 21:40 UTC 


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox