messages from 2026-09-17 01:55:01 to 2026-09-22 21:03:56 UTC [more...]
[PATCH nf 0/1] netfilter: ecache: bound destroy event redelivery
2026-09-22 21:03 UTC (3+ messages)
` [PATCH nf 1/1] "
[PATCH net 0/6] ovs, net/sched: fixes for UAF after conntrack extension realloc
2026-09-22 20:43 UTC (25+ messages)
` [PATCH net 1/6] net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry
` [PATCH net 2/6] net: openvswitch: conntrack: remove 'add_helper' dead code
` [PATCH net 3/6] net: openvswitch: conntrack: fix helper UAF due to extensions realloc
` [PATCH net 4/6] net/sched: act_ct: avoid modifying shared unconfirmed ct entry
` [PATCH net 5/6] net/sched: act_ct: remove 'add_helper' dead code
` [PATCH net 6/6] net/sched: act_ct: fix helper UAF due to extensions realloc
[PATCH nf] netfilter: bpf: reject invalid NAT manipulation types
2026-09-22 19:18 UTC
[PATCH v5 nf-next 0/3] ipvs: add per-service secure_tcp
2026-09-22 17:12 UTC (7+ messages)
` [PATCH v5 nf-next 1/3] ipvs: add flags for per-service secure TCP state table
` [PATCH v5 nf-next 2/3] ipvs: tcp: enable per-connection secure_tcp in state machine
` [PATCH v5 nf-next 3/3] selftests: netfilter: ipvs: add per-service secure_tcp test
` [PATCH v5 nf-next 3/3] selftests: netfilter: ipvs: add per-service secure_tcp test (David Dull)
[PATCH] ipvs: skip committing sync_threshold when proc_dointvec fails
2026-09-22 16:52 UTC (2+ messages)
[PATCH nf-next] netfilter: nft_nat: use the right enum members for nat type switch
2026-09-22 16:51 UTC (2+ messages)
[PATCH nf v2] netfilter: nft_reject: prevent unbounded recursion in output hooks
2026-09-22 10:25 UTC (2+ messages)
[PATCH nf v3 0/1] netfilter: nf_dup: disable duplication in user namespaces
2026-09-22 9:52 UTC (2+ messages)
` [PATCH nf v3 1/1] "
[PATCH nf] netfilter: nft_reject: prevent unbounded recursion in output hooks
2026-09-22 9:05 UTC (3+ messages)
[PATCH net v6 0/2] net: prevent partial checksums from modifying network headers
2026-09-22 8:46 UTC (7+ messages)
` [PATCH net v6 1/2] net: validate virtio checksum start after network header
` [PATCH net v6 2/2] ip: reject partial checksums covering network headers
[PATCH v2] netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets
2026-09-21 13:03 UTC
[PATCH] netfilter: nf_nat: Fix stale outer UDP checksum on VXLAN encapsulated packets
2026-09-21 13:01 UTC (3+ messages)
[PATCH net v5 0/2] net: prevent partial checksums from modifying network headers
2026-09-22 0:55 UTC (7+ messages)
` [PATCH net v5 1/2] net: validate virtio checksum start after network header
` [PATCH net v5 2/2] ip: reject partial checksums covering network headers
[PATCH net,v2 0/8] Netfilter/IPVS fixes for net
2026-09-21 22:20 UTC (16+ messages)
` [PATCH net 1/8] netfilter: flowtable: publish HW_DEAD after worker is done
` [PATCH net 2/8] netfilter: nfnetlink_queue: hold nfnl mutex in event notifier
` [PATCH net 3/8] netfilter: ip6t_rpfilter: reject routes without inet6_dev
` [PATCH net 4/8] netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read
` [PATCH net 5/8] netfilter: nft_synproxy: use the family-aware checksum helper
` [PATCH net 6/8] ipvs: revalidate ihl before icmp_send
` [PATCH net 7/8] netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name
` [PATCH net 8/8] netfilter: nf_tables: skip expired catchall elements on insert and delete
[PATCH net 01/10] netfilter: flowtable: publish HW_DEAD after worker is done
2026-09-21 20:56 UTC (5+ messages)
` my summary of LLM judgement in this PR [was Re: [PATCH net 01/10] netfilter: flowtable: publish HW_DEAD after worker is done]
[PATCH nf] netfilter: nft_set_rbtree: skip transaction elements during GC
2026-09-21 20:48 UTC (4+ messages)
[PATCH nft] payload: restore is_raw flag for th expressions parsed from udata
2026-09-21 18:50 UTC (2+ messages)
[BUG] netfilter: unbounded nftables reject recursion on inet OUTPUT
2026-09-21 10:32 UTC (3+ messages)
[PATCH net v2 0/2] ipvs: avoid stack overflow from recursive connection expiration
2026-09-21 7:10 UTC (10+ messages)
` [PATCH net v2 1/2] "
` [PATCH net v2 2/2] ipvs: reject FTP control ports as data ports
[PATCH v4 nf-next 0/3] ipvs: add per-service secure_tcp
2026-09-21 5:50 UTC (7+ messages)
` [PATCH v4 nf-next 1/3] ipvs: add flags for per-service secure TCP state table
` [PATCH v4 nf-next 2/3] ipvs: tcp: enable per-connection secure_tcp in state machine
` [PATCH v4 nf-next 3/3] selftests: netfilter: ipvs: add per-service secure_tcp test
[PATCH 6.12.y 0/3] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
2026-09-20 17:50 UTC (5+ messages)
` [PATCH 6.12.y 1/3] netfilter: nf_conntrack_pptp: move GRE specific cleanup to GRE tracker
` [PATCH 6.12.y 2/3] netfilter: conntrack: check NULL when retrieving ct extension
` [PATCH 6.12.y 3/3] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
[PATCH net 0/1] ipvs: bound twos scheduler destination walks
2026-09-20 14:09 UTC (8+ messages)
[PATCH nf v3 0/1] netfilter: x_tables: avoid holding mutex over faultable user copies
2026-09-20 11:58 UTC (2+ messages)
` [PATCH nf v3 1/1] "
[PATCH nf v3 0/2] ipvs: avoid stack overflow from recursive connection expiration
2026-09-20 9:31 UTC (3+ messages)
` [PATCH nf v3 1/2] "
` [PATCH nf v3 2/2] ipvs: reject FTP control ports as data ports
[PATCH] netfilter: nf_nat: fix unsigned range_size underflow for ICMP and GRE when max < min
2026-09-19 21:52 UTC
[PATCH] netfilter: nfnetlink_log: fix config error handling, SIT headroom OOB read, and nlmsg rollback
2026-09-19 21:52 UTC
[PATCH v2 nf 0/2] ipvs: filter some connection flags
2026-09-19 18:07 UTC (3+ messages)
` [PATCH v2 nf 1/2] ipvs: do not create invisible templates
` [PATCH v2 nf 2/2] ipvs: filter some flags received in the backup server
[PATCH nf 0/1] netfilter: nf_ip6_checksum: validate checksum offset
2026-09-19 14:35 UTC (6+ messages)
` [PATCH nf 1/1] "
[PATCH nf-next] selftests: netfilter: nft_queue.sh: only queue icmp echo request/reply
2026-09-19 6:24 UTC (2+ messages)
[PATCH] netfilter: nf_tables: defer object destruction on abort past commit_mutex
2026-09-19 3:34 UTC (2+ messages)
` [PATCH v2] "
[PATCH net] selftests: net: update netfilter netlink config
2026-09-19 0:30 UTC (5+ messages)
[PATCH 6.1.y 0/3] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
2026-09-18 18:24 UTC (4+ messages)
` [PATCH 6.1.y 1/3] netfilter: nf_conntrack_pptp: move GRE specific cleanup to GRE tracker
` [PATCH 6.1.y 2/3] netfilter: conntrack: check NULL when retrieving ct extension
` [PATCH 6.1.y 3/3] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
[PATCH 6.6.y 0/3] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
2026-09-18 18:23 UTC (4+ messages)
` [PATCH 6.6.y 1/3] netfilter: nf_conntrack_pptp: move GRE specific cleanup to GRE tracker
` [PATCH 6.6.y 2/3] netfilter: conntrack: check NULL when retrieving ct extension
` [PATCH 6.6.y 3/3] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
[PATCH nf v3 0/6] netfilter: harden conntrack vs ingress pipeline rewrites
2026-09-18 14:58 UTC (7+ messages)
` [PATCH v3 nf 1/6] netfilter: nf_conntrack: validate skb->_nfct and packet headers
` [PATCH v3 nf 2/6] netfilter: nf_conntrack: refactor helper call logic in nf_confirm()
` [PATCH v3 nf 3/6] netfilter: nf_conntrack: verify L4 protocol before calling helper
` [PATCH v3 nf 4/6] netfilter: conntrack: replace open-coded helper invocation
` [PATCH v3 nf 5/6] netfilter: nf_conntrack: harden helper invocation with tuple revalidation
` [PATCH v3 nf 6/6] netfilter: nft_ct: validate timeout object protocol
[PATCH nf,v2] netfilter: flowtable: generalize pending status bit
2026-09-18 12:45 UTC
[PATCH nf] netfilter: flowtable: generalize pending status bit
2026-09-18 11:53 UTC
[PATCH net 07/10] ipvs: filter some flags received in the backup server
2026-09-18 10:23 UTC (4+ messages)
[PATCH net 02/10] netfilter: nfnetlink_queue: hold nfnl mutex in event notifier
2026-09-18 9:51 UTC (4+ messages)
[PATCH net 10/10] netfilter: nf_tables: skip expired catchall elements on insert and delete
2026-09-18 8:41 UTC (3+ messages)
[PATCH net 03/10] netfilter: ip6t_rpfilter: reject routes without inet6_dev
2026-09-18 8:39 UTC (3+ messages)
[PATCH nf-next v5] netfilter: ip6tables: hotdrop malformed hbh/dst and srh headers
2026-09-18 6:18 UTC
[PATCH nf] ipvs: filter some flags received in the backup server
2026-09-18 4:23 UTC (2+ messages)
[syzbot] [netfilter?] INFO: task hung in nf_tables_valid_genid (3)
2026-09-18 0:29 UTC
[nft PATCH] Fix for warnings when compiling for 32bit arch
2026-09-17 17:37 UTC
[nft PATCH 1/2] doc: nft.8: Describe nftables transactions and their limitations
2026-09-17 17:31 UTC (2+ messages)
` [nft PATCH 2/2] doc: nft.8: Document caveats when mixing clients
[PATCH nf v2 0/6] netfilter: harden conntrack vs ingress pipeline rewrites
2026-09-17 13:09 UTC (7+ messages)
` [PATCH v2 nf 1/6] netfilter: nf_conntrack: validate skb->_nfct and packet headers
` [PATCH v2 nf 2/6] netfilter: nf_conntrack: refactor helper call logic in nf_confirm()
` [PATCH v2 nf 3/6] netfilter: nf_conntrack: verify L4 protocol before calling helper
` [PATCH v2 nf 4/6] netfilter: conntrack: replace open-coded helper invocation
` [PATCH v2 nf 5/6] netfilter: nf_conntrack: harden helper invocation with tuple revalidation
` [PATCH v2 nf 6/6] netfilter: nft_ct: validate timeout object protocol
[PATCH nf-next] netfilter: nfnetlink_queue: hash queue instance by portid too
2026-09-17 9:30 UTC (4+ messages)
[PATCH nf-next v3 0/6] net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload
2026-09-17 8:29 UTC (7+ messages)
` [PATCH nf-next v3 1/6] net: netfilter: nf_flow_table: recognize IPv4/IPv6 in tunnel proto matching
` [PATCH nf-next v3 2/6] net: netfilter: nf_flow_table: set inner protocol when popping tunnel header
` [PATCH nf-next v3 3/6] net: netfilter: nf_flow_table: populate tunnel tuple regardless of inner protocol
` [PATCH nf-next v3 4/6] net: netfilter: add encap_proto to flow_offload_tunnel
` [PATCH nf-next v3 5/6] net: netfilter: nf_flow_table: refactor MTU check for tunnel offload
` [PATCH nf-next v3 6/6] net: netfilter: nf_flow_table: unify tunnel push for IPv4 and IPv6
[PATCH nf-next v2 0/6] net: netfilter: preliminary support for IPv4 over IPv6 and SIT flowtable offload
2026-09-17 8:26 UTC (4+ messages)
` [PATCH nf-next v2 6/6] net: netfilter: nf_flow_table: unify tunnel push for IPv4 and IPv6
[PATCH nf-next v5 3/3] selftests: netfilter: nft_flowtable.sh: roam a host between two bridge ports
2026-09-17 7:27 UTC (2+ messages)
[PATCH nf-next v5 2/3] netfilter: flowtable: teardown direct xmit flows when the fdb entry moves
2026-09-17 7:27 UTC (2+ messages)
[PATCH net v2] net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check
2026-09-17 1:55 UTC (2+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox