messages from 2026-10-21 09:52:16 to 2026-10-29 13:35:45 UTC [more...]
[PATCH nf-next 0/8] Add IPv4 over IPv6 and SIT flowtable SW acceleration
2026-10-29 13:35 UTC (5+ messages)
` [PATCH nf-next 1/8] net: netfilter: nf_flow_table: recognize IPv4/IPv6 in tunnel proto matching
` [PATCH nf-next 2/8] net: netfilter: nf_flow_table: refactor MTU check for tunnel offload
` [PATCH nf-next 3/8] net: ip6_tunnel: add IPv4 over IPv6 flowtable "
` [PATCH nf-next 4/8] net: netfilter: nf_flow_table: use tunnel encap proto for route lookup
[PATCH nf-next] net: airoha: update stats on flow deletion
2026-10-29 13:18 UTC
[PATCH nf-next] netfilter: xt_time: fix monthday computation for dates past 2039
2026-10-29 13:17 UTC
[PATCH nf-next,v4 1/2] netfilter: flowtable: retrieve stats on flow deletion
2026-10-29 13:11 UTC (3+ messages)
` [PATCH nf-next,v4 2/2] net: ethernet: mtk_ppe: update "
[PATCH nf-next,v3 1/2] netfilter: flowtable: retrieve stats on flow deletion
2026-10-29 11:58 UTC (2+ messages)
` [PATCH nf-next,v3 2/2] net: ethernet: mtk_ppe: update "
[PATCH nf-next 1/2] netfilter: flowtable: retrieve stats on flow deletion
2026-10-29 11:45 UTC (8+ messages)
` [PATCH nf-next 2/2] net: ethernet: mtk_ppe: update "
[PATCH nf-next,v2 1/2] netfilter: flowtable: retrieve stats on flow deletion
2026-10-29 11:40 UTC (4+ messages)
` [PATCH nf-next,v2 2/2] net: ethernet: mtk_ppe: update "
[PATCH nf] netfilter: nft_flow_offload: do not offload multicast
2026-10-29 11:38 UTC (3+ messages)
invalid pointer in nf_conntrack
2026-10-29 10:29 UTC (2+ messages)
[PATCH net v3 0/3] net/ipv6: don't route packets with unknown source address
2026-10-29 6:28 UTC (6+ messages)
` [PATCH net v3 1/3] net/ipv6: add ipv6_chk_addr_namespace
` [PATCH net v3 2/3] net/ipv6: don't route packets with unknown source address
` [PATCH net v3 3/3] selftests: net: add tests for saddr, anycast and loopback subnets
net: flow_offload: flow_indr_dev_unregister() runs container cleanup callbacks after the container may already be freed (tc/nftables/flowtable use-after-free)
2026-10-29 2:46 UTC
net: flow_offload: existing_qdiscs_register() splices into live container cb_lists without holding the container lock (list corruption / use-after-free)
2026-10-29 2:45 UTC
[PATCH nf,v3] netfilter: nfnetlink_queue: restrict NFQA_EXP to userspace helpers
2026-10-28 22:13 UTC (3+ messages)
[PATCH net] netfilter: xt_recent: do not call remove_proc_entry() under recent_lock
2026-10-28 22:01 UTC (3+ messages)
[PATCH libftnl 00/12] more misc LLM fixes
2026-10-28 14:56 UTC (13+ messages)
` [PATCH libftnl 01/12] src: common: mnl_nlmsg_batch_start may return NULL
` [PATCH libftnl 02/12] src: fix uninitialised attr arrays
` [PATCH libftnl 03/12] src: move several MNL_STRING types to MNL_NUL_STRING
` [PATCH libftnl 04/12] src: expr: make sure NFTA_EXPR_NAME was parsed successfuly
` [PATCH libftnl 05/12] src: object: don't permit to re-set or clear object type field
` [PATCH libftnl 06/12] include: drop semicolon at end of xfree macro
` [PATCH libftnl 07/12] src: ruleset: remove set_elem member from union
` [PATCH libftnl 08/12] src: set: clear field_len array before copying
` [PATCH libftnl 09/12] src: set: check for empty list explicitly
` [PATCH libftnl 10/12] src: set_elem: list_del before freeing
` [PATCH libftnl 11/12] src: udata: clamp buf->end to actally copied size
` [PATCH libftnl 12/12] src: remove all remaining MNL_STRING users
[PATCH ipset] tests: hash:net,iface.t: add test case for wildcard matching behaviour
2026-10-28 13:02 UTC
[PATCH nf,v2] netfilter: nf_tables: fix memleak when rule deletion fails with hardware offload
2026-10-28 11:25 UTC
[PATCH nf] netfilter: nf_tables: fix memleak when rule deletion fails with hardware offload
2026-10-28 11:07 UTC
[BUG Report] UAF in ipt_do_table() on table replace (v5.10/v6.6)
2026-10-28 9:41 UTC (3+ messages)
[PATCH nf] netfilter: nf_tables: fix flow rule leak in nft_delrule() error path
2026-10-28 6:25 UTC (2+ messages)
[PATCH nf] netfilter: flowtable: perform unbind callback on hook release
2026-10-28 0:19 UTC
[PATCH nf] netfilter: nf_nat: do not link a conntrack twice into nat_bysource
2026-10-27 23:16 UTC (3+ messages)
[PATCH] lib/ts_bm: fix missed matches with TS_IGNORECASE
2026-10-27 18:22 UTC (2+ messages)
[PATCH nf v6 0/6] ipset: replace internal hash table with rhashtable
2026-10-27 18:04 UTC (9+ messages)
` [PATCH nf v6 1/6] rhashtable: Add rhashtable_flush_and_free helper
` [PATCH nf v6 2/6] netfilter: ipset: add rhashtable boilerplate stubs
` [PATCH nf v6 3/6] netfilter: ipset: add rhltable "
` [PATCH nf v6 4/6] netfilter: ipset: replace internal hash table with rhashtable
` [PATCH nf v6 5/6] netfilter: ipset: re-add forceadd support
` [PATCH nf v6 6/6] netfilter: ipset: also report mem size for cidr storage to userspace
[PATCH nf v2 1/1] ipset: ignore port ranges for portless protocols
2026-10-27 5:05 UTC
[PATCH] netfilter: xt_policy: add NULL check for skb_dst() in output policy match
2026-10-26 15:34 UTC (3+ messages)
[PATCH libnftnl 0/7] misc LLM fixes
2026-10-26 14:46 UTC (9+ messages)
` [PATCH libnftnl 1/7] include: str_array.h: avoid oob read
` [PATCH libnftnl 2/7] src: chain: fix NFTNL_CHAIN_TYPE data_len
` [PATCH libnftnl 3/7] src: common: fix fd leak in nftnl_batch_is_supported
` [PATCH libnftnl 4/7] expr: nftnl_expr_parse: use nftnl_expr_free on error unwind
` [PATCH libnftnl 5/7] src: flowtable: allow to unset NFTNL_FLOWTABLE_SIZE
` [PATCH libnftnl 6/7] src: utils: keep old name if strndup fails
` [PATCH libnftnl 7/7] src: add and use nftnl_mem_blob for user_data
[PATCH nf v2] netfilter: nf_conntrack_sip: fix OOB read in ct_sip_parse_transport()
2026-10-26 14:26 UTC (2+ messages)
[PATCH] netfilter: nf_conntrack_sip: fix out-of-bounds read in ct_sip_parse_transport()
2026-10-26 14:08 UTC (3+ messages)
[PATCH nf] netfilter: x_tables: check target name before accessing verdict
2026-10-26 12:07 UTC
[PATCH nf] netfilter: ipset: fix double free on kernel-side delete during resize
2026-10-26 10:29 UTC (5+ messages)
` [PATCH nf v2] "
` [PATCH nf v3] "
[REGRESSION] netfilter: flowtable: HW offloaded flows are not removed from hardware on flowtable deletion since 13210fc63f35
2026-10-26 3:56 UTC (2+ messages)
` [PATCH nf] netfilter: flowtable: remove hardware flows before unbinding
[PATCH 5.10.y] netfilter: nf_tables: unconditionally bump set->nelems before insertion
2026-10-25 23:29 UTC (6+ messages)
` [PATCH v2 5.10.y 0/2] "
` [PATCH v2 5.10.y 1/2] netfilter: nf_tables: always increment set element count
` [PATCH v2 5.10.y 2/2] netfilter: nf_tables: unconditionally bump set->nelems before insertion
[PATCH 5.15.y] netfilter: nf_tables: unconditionally bump set->nelems before insertion
2026-10-25 23:29 UTC (6+ messages)
` [PATCH v2 5.15.y 0/2] "
` [PATCH v2 5.15.y 1/2] netfilter: nf_tables: always increment set element count
` [PATCH v2 5.15.y 2/2] netfilter: nf_tables: unconditionally bump set->nelems before insertion
[PATCH nf] netfilter: nft_set_pipapo: skip transaction elements during GC
2026-10-25 16:48 UTC (5+ messages)
[PATCH nf-next v3] netfilter: nft_limit: reject configs whose per-packet cost can overflow
2026-10-25 13:02 UTC (2+ messages)
[PATCH 5.10.y] netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
2026-10-24 20:11 UTC (2+ messages)
[PATCH 5.15.y] netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
2026-10-24 20:11 UTC (2+ messages)
[PATCH 5.10.y] netfilter: nf_tables: release flowtable after rcu grace period on error
2026-10-24 20:11 UTC (2+ messages)
[PATCH 5.15.y] netfilter: nf_tables: always walk all pending catchall elements
2026-10-24 20:11 UTC (2+ messages)
[PATCH nf-next v8 0/2] netfilter: flowtable: tear down bridged flows on layer 2 roaming
2026-10-24 14:13 UTC (3+ messages)
` [PATCH nf-next v8 1/2] netfilter: flowtable: tear down direct xmit flows when the fdb entry moves
[iptables PATCH] include: linux: drop bundled copy of types.h
2026-10-24 13:55 UTC
[RFC net-next v2 00/18] net: introduce ipxlat stateless IPv4/IPv6 translation
2026-10-24 9:25 UTC (2+ messages)
` [RFC net-next v2 04/18] netfilter: preserve IPv6 refragmentation state across reassembly
[SECURITY] netfilter: nft_limit byte-rate bypass via unchecked u64 multiplication
2026-10-23 20:39 UTC (6+ messages)
` [PATCH nf-next] netfilter: nft_limit: reject configurations that cause integer overflow
` [PATCH nf-next v2] netfilter: nft_limit: reject configs whose per-packet cost can overflow
[PATCH net v6 6/6] net: add ip4_parse()
2026-10-23 16:48 UTC (2+ messages)
[nft PATCH] tests: shell: Fix for spurious fail in maps/typeof_maps_add_delete
2026-10-23 13:26 UTC (4+ messages)
[PATCH nf,v3 1/3] netfilter: nfnetlink_queue: add helper function to retrieve hook entries
2026-10-23 9:13 UTC (4+ messages)
` [PATCH nf,v3 2/3] netfilter: ctnetlink: restrict expectation creation glue to userspace helpers
` [PATCH nf,v3 3/3] netfilter: nfnetlink_queue: restrict NFQA_EXP "
[PATCH 2/2] selftests: netfilter: add bridge conntrack test for vlan protocol mismatch
2026-10-23 9:04 UTC (2+ messages)
[PATCH 1/2] netfilter: bridge: refragment packets with a vlan tag moved by the bridge
2026-10-23 9:04 UTC (2+ messages)
[PATCH nf,v4] netfilter: nf_reject_ipv6: fix locally generated packet to local address
2026-10-23 8:04 UTC (4+ messages)
[PATCH nf 0/1] netfilter: ebtables: validate compat nentries
2026-10-23 6:46 UTC (3+ messages)
` [PATCH nf 1/1] "
[PATCH nf-next] netfilter: ipvs: avoid passing skb->sk to route_me_harder
2026-10-23 5:53 UTC (2+ messages)
[PATCH nf v3] netfilter: nft_reject: prevent unbounded recursion in output hooks
2026-10-22 22:06 UTC (3+ messages)
[PATCH nft 0/3] allow map lookups as operands of bitwise binops
2026-10-22 20:45 UTC (4+ messages)
` [PATCH nft 1/3] src: "
` [PATCH nft 2/3] tests: py: add map lookups as bitwise operands
` [PATCH nft 3/3] tests: shell: "
[PATCH nf 0/1] ipset: ignore port ranges for portless protocols
2026-10-22 19:31 UTC (3+ messages)
` [PATCH nf 1/1] "
[PATCH] netfilter: nf_conntrack_h323: fix out-of-bounds read in get_bitmap()
2026-10-22 17:48 UTC
[syzbot] [netfilter?] WARNING in nf_flow_table_extend_ct_timeout
2026-10-22 17:20 UTC (4+ messages)
[PATCH net 0/3] xsk, ipv6: validate user-supplied checksum offsets
2026-10-22 13:15 UTC (9+ messages)
` [PATCH net 1/3] xsk: validate checksum offload requests in copy mode
` [PATCH net 2/3] xsk: document checksum offload handling "
` [PATCH net 3/3] ipv6: validate checksum_start before fragmenting
[PATCH net v5 6/7] net: add ip4_parse()
2026-10-22 12:58 UTC
[PATCH net 03/10] ipvs: fix more races around the overload flag
2026-10-22 4:12 UTC (3+ messages)
[PATCH nf-next v2 0/4] netfilter: offload a TCP flow whose reply is never seen
2026-10-21 22:38 UTC (4+ messages)
` [PATCH nf-next v2 1/4] netfilter: conntrack: pick up a TCP flow whose SYN was never answered
[PATCH nf-next v2 1/2] netfilter: nf_queue: limit the hook drop flush to the unregistered hook point
2026-10-21 19:43 UTC (6+ messages)
[PATCH nf-next 0/4] netfilter: nf_queue: follow-ups to the hook drop flush change
2026-10-21 19:35 UTC (5+ messages)
` [PATCH nf-next 1/4] netfilter: br_netfilter: flush nfqueue entries when the hooks are removed
` [PATCH nf-next 2/4] netfilter: conntrack: flush nfqueue entries before waiting for the conntrack count
` [PATCH nf-next 3/4] selftests: netfilter: nft_queue.sh: fix the exit status on failure
` [PATCH nf-next 4/4] selftests: netfilter: nft_queue.sh: harden test_hook_drop_scope
[PATCH nf] netfilter: flowtable: fetch hardware counters before removing a flow
2026-10-21 17:50 UTC
[PATCH net v4 6/7] net: add ip4_parse()
2026-10-21 16:18 UTC (2+ messages)
expose named set element count
2026-10-21 13:42 UTC (3+ messages)
[iptables PATCH] extensions: libxt_conntrack: Fail on untranslatable state match
2026-10-21 13:40 UTC (4+ messages)
[PATCH nf,v3] netfilter: nf_reject_ipv6: fix locally generated packet to local address
2026-10-21 10:44 UTC
[PATCH nf,v2] netfilter: nf_reject_ipv6: fix locally generated packet to local address
2026-10-21 10:22 UTC
[nft PATCH] tests: shell: Add missing feature tests to packetpath tests
2026-10-21 10:15 UTC (2+ messages)
[PATCH nf-next 2/3] netfilter: flowtable: update upper device stats in the fast path
2026-10-21 9:51 UTC (4+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox