2026-07-20 20:11 [PATCH nf v2 0/2] ipvs: csum validations and data offsets 3+ messages
2026-07-19 22:15 [PATCH nf] netfilter: nft_payload: fix mask build for partial field offload
2026-07-17 18:59 [PATCH iptables] nft: fix out-of-bounds read listing an old-revision match
2026-07-17 18:56 [PATCH iptables] nft: bridge: fix among buffer overflow when set has no size
2026-07-17 11:06 [PATCH nf,v3] netfilter: nf_tables: make nft_object rhltable per table
2026-07-17 7:51 [PATCH nf,v2] netfilter: nf_tables: make nft_object rhltable per table
2026-07-16 14:39 [PATCH nf] netfilter: nf_tables: make nft_object rhltable per netns
2026-07-16 14:07 [PATCH nf-next] ipvs: use type-safe allocation helpers in ip_vs_rht_alloc 2+ messages
2026-07-16 9:10 [PATCH nft] tests: shell: add template match bug test
2026-07-15 23:02 [nft PATCH] tests: py: Fix --keep test runner option
2026-07-15 14:48 [PATCH nf] netfilter: conntrack: prevent helper extension relocation
2026-07-14 13:18 [PATCH RFC nf-next 01/12] netfilter: ipset: rework cidr bookkeeping 29+ messages
2026-07-14 5:26 Dear netfilter-devel, project info
2026-07-14 3:21 [PATCH nf v2] netfilter: ip6tables: set hotdrop for malformed extension header matches 2+ messages
2026-07-13 18:36 [PATCH nf] netfilter: nft_fib: bail out if input device is missing 3+ messages
2026-07-13 16:33 [PATCH nf-next v3] netfilter: ipset: skip extension destroy on hash resize replay
2026-07-13 16:15 [PATCH nf-next v2] netfilter: ipset: skip extension destroy on hash resize replay
2026-07-13 16:06 [PATCH nf-next 2/2] netfilter: nf_conntrack_expect: store event cache in expectation 2+ messages
2026-07-13 14:19 [PATCH nf,v3] netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair()
2026-07-13 13:55 [PATCH libnflog] utils: add minimal nfnlog test case
2026-07-13 12:53 [PATCH nf v2] selftests: netfilter: nft_flowtable.sh: fix offload counter verification for tunnel tests
2026-07-13 12:46 [PATCH nf-next v6 0/6] Add IPv4 over IPv6 and SIT flowtable SW acceleration 7+ messages
2026-07-13 12:36 [PATCH nf-next,v5] netfilter: flowtable: initial bridge support
2026-07-13 11:52 [PATCH v2 1/2] ipvs: do not propagate one-packet flag to synced conns 4+ messages
2026-07-13 11:07 [PATCH RFC net-next v3 2/3] net: Const qualify ctl_tables that kmemdup unconditionally 4+ messages
2026-07-13 9:59 [PATCH nf] netfilter: ipset: do not update comments from kernel-side hash adds 2+ messages
2026-07-13 9:48 [PATCH nf v3 1/2] ipvs: properly update the overload flag on dest edit 5+ messages
2026-07-13 8:42 [PATCH nf-next,v4] netfilter: flowtable: initial bridge support
2026-07-12 23:42 [PATCH nf] netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()
2026-07-12 23:37 [PATCH nf,v2] netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair()
2026-07-12 23:20 [PATCH nf-next,v3] netfilter: flowtable: initial bridge support
2026-07-12 23:19 [PATCH nf,v3] netfilter: flowtable: initial bridge support 2+ messages
2026-07-12 23:06 [PATCH nf] netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair()
2026-07-12 7:32 [PATCH nf v2 1/2] netfilter: nf_nat: stop reusing DEAD RTP expectations 2+ messages
2026-07-12 1:38 [PATCH 01/13 RFC net-next] net: ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack 6+ messages
2026-07-11 13:55 [PATCH nf] selftests: netfilter: nft_flowtable.sh: check offload counters for IP6IP6 tunnel test
2026-07-10 23:19 netfilter: nf_nat_sip expectation UAF permits local privilege escalation 10+ messages
2026-07-10 15:14 [nf-next PATCH v3 3/4] netfilter: nfnetlink_hook: Handle multipart NAT hook dumps 5+ messages
2026-07-10 14:37 [PATCH net 0/9] netfilter: updates for net 14+ messages
2026-07-10 13:30 [PATCH net v3] netfilter: nf_nat: recalculate TCP TS offset after SNAT port rewrite
2026-07-10 10:47 [PATCH nf] netfilter: x_physdev: masks are not c-strings
2026-07-10 10:07 [PATCH nf-next,v2 0/3] initial flowtable bridge support 12+ messages
2026-07-10 7:54 [PATCH nf,v2] netfilter: flowtable: tear down flow entries with stale dst from GC 6+ messages
2026-07-10 7:36 [PATCH nf-next] netfilter: flowtable: tear down flow entries with stale dst from GC 2+ messages
2026-07-09 20:23 [PATCH nf] ipvs: fix the checksum validations 4+ messages
2026-07-09 20:03 [PATCH ipset 0/7] test updates 11+ messages
2026-07-09 19:46 [nf-next PATCH v2 2/5] netfilter: nfnetlink_hook: Pass cb object to nfnl_hook_dump_nat() 6+ messages
2026-07-09 16:53 [nft PATCH] mnl: support RLIMIT_NOFILE soft limit > FD_SETSIZE 2+ messages
2026-07-09 13:12 [PATCH net v2] netfilter: nf_nat: recalculate TCP TS offset when snat change sport 2+ messages
2026-07-09 11:40 [PATCH nf] netfilter: flowtable: use correct direction to set up tunnel route
2026-07-09 8:52 [PATCH nf-next v5 0/6] Add IPv4 over IPv6 and SIT flowtable SW acceleration 7+ messages
2026-07-09 6:30 [PATCH nf] netfilter: ip6tables: set hotdrop for malformed extension header matches 3+ messages
2026-07-08 23:35 [PATCH nft] parser_json: initialize geneve options list for empty tunnel array 2+ messages
2026-07-08 20:54 [PATCH nf] netfilter: flowtable: tear down HW offloaded flows on FIB route changes 5+ messages
2026-07-08 18:11 [PATCH net v2] netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() 2+ messages
2026-07-08 18:03 [PATCH nf] ipvs: fix more places with wrong ipv6 transport offsets
2026-07-08 16:19 [nf-next PATCH 2/4] netfilter: nfnetlink_hook: Deref hook entry using READ_ONCE() 9+ messages
2026-07-08 14:28 [PATCH nf] ipvs: reload ip header after head reallocation 2+ messages
2026-07-08 14:02 [PATCH net 00/17] netfilter: updates for net 19+ messages
2026-07-08 12:48 [PATCH net-next] net: ip6_tunnel: use tunnel parameters for fill_forward_path route lookup 2+ messages
2026-07-08 11:25 [PATCH net-next] net: ipip: use tunnel parameters for fill_forward_path route lookup 4+ messages
2026-07-08 10:59 [netfilter-nf:testing 11/20] net/netfilter/ipset/ip_set_hash_gen.h:379:21: warning: result of comparison of constant -1 with expression of type 'u8' (aka 'unsigned char') is always false 2+ messages
2026-07-08 9:32 [PATCH nf-next,v1 1/4] bridge: Add filling forward path from port to port 5+ messages
2026-07-08 9:31 [PATCH nf,v1 1/4] bridge: Add filling forward path from port to port
2026-07-08 9:22 [RFC] VEGA: a syzbot-like workflow for LLM-found kernel bugs 7+ messages
2026-07-08 6:04 [PATCH nf v2] ipvs: make destination flags atomic 2+ messages
2026-07-08 5:27 [PATCH nf v2] netfilter: nf_conncount: fix zone comparison in tuple dedup
2026-07-07 19:51 [PATCH nf-next 3/4] netfilter: nf_nat_amanda: replace u_int16_t with u16 6+ messages
2026-07-07 18:25 [PATCH nf v2] ipvs: ensure inner headers in ICMP errors are in headroom
2026-07-07 11:18 [PATCH nf v2] netfilter: handle unreadable frags 2+ messages
2026-07-07 11:00 [PATCH nf] netfilter: ecache: fix inverted time_after() check
2026-07-07 9:10 [PATCH v12 nf-next 0/7] netfilter: Add bridge-fastpath 19+ messages
2026-07-07 8:57 [PATCH nf] ipvs: make destination flags atomic 7+ messages
2026-07-06 23:28 [PATCH net] netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() 3+ messages
2026-07-06 15:52 [PATCH nf] netfilter: handle unreadable frags
2026-07-06 15:10 [PATCH nf] ipvs: ensure inner headers in ICMP errors are in headroom 2+ messages
2026-07-06 12:30 [PATCH nf-next] netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet
2026-07-06 11:48 [PATCH nf] netfilter: nf_conncount: fix zone comparison in tuple dedup 3+ messages
2026-07-06 10:16 [PATCH nf v2 0/3] ipvs: use parsed transport offsets in state handlers 5+ messages
2026-07-06 10:02 [PATCH nf] netfilter: ebtables: zero chainstack array
2026-07-06 10:01 [PATCH nf] netfilter: ebtables: module names must be null-terminated
2026-07-05 23:36 [PATCH nf] netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag
2026-07-05 21:58 [PATCH nf] netfilter: ebtables: terminate table name before find_table_lock()
2026-07-05 12:56 [PATCH nf] ipvs: skip IPv6 extension headers in TCP state lookup
2026-07-05 12:30 [PATCH nf] ipvs: skip IPv6 extension headers in SCTP state lookup 5+ messages
2026-07-04 9:29 [PATCH nf] netfilter: ebtables: must null-terminate name
2026-07-04 8:48 [PATCH nf-next 0/3] netfilter: ebtables: shashiko nitpicks 5+ messages
2026-07-04 7:31 [PATCH nf-next] netfilter: xt_tcpmss: extend checkentry to ipv6
2026-07-04 6:22 [PATCH nf] netfilter: ipset: skip extension destroy on hash resize replay 3+ messages
2026-07-03 16:22 [PATCH] netfilter: nft_lookup: fix catchall element handling with inverted lookups
2026-07-03 14:10 [PATCH nf-next v4 0/6] Add IPv4 over IPv6 and SIT flowtable SW acceleration 11+ messages
2026-07-03 12:57 [PATCH net 0/9] netfilter: updates for net 12+ messages
2026-07-03 7:32 [PATCH nf 1/1] netfilter: xt_time: reject pre-epoch calendar matching 7+ messages
2026-07-03 5:04 [PATCH nf 1/1] netfilter: xt_connmark: reject invalid shift parameters 2+ messages
2026-07-02 13:46 [PATCH 0/5] netfilter: ipset: gc, backlog and cidr patches 6+ messages
2026-07-02 12:36 [PATCH nft 1/2] segtree: fix get element command with open intervals 6+ messages
2026-07-02 12:33 [PATCH nf] netfilter: nft_set_rbtree: get command skips end element with open interval
2026-07-02 11:28 [PATCH net] ipvs: reset full ip_vs_seq structs in ip_vs_conn_new 2+ messages
2026-07-02 10:49 [PATCH net-next 00/12] netfilter: updates for net-next 16+ messages
2026-07-02 10:10 [PATCH v2 nf-next] ipvs: Move defense_work and est_reload_work to system_dfl_long_wq 3+ messages
2026-07-02 7:34 [PATCH net v2] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors 4+ messages
2026-07-01 12:32 [syzbot] Monthly netfilter report (Jul 2026)
2026-07-01 10:46 [PATCH nf] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates
2026-07-01 10:09 [PATCH nf v2] netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
2026-07-01 6:59 [PATCH net] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors 2+ messages
2026-07-01 6:29 [PATCH nf] netfilter: nf_nat_sip: reload possible stale data pointer
2026-07-01 4:37 [PATCH nf-next v4] netfilter: nft_ct: support expectation creation for natted flows
2026-06-30 19:09 [PATCH v3 nf] netfilter: nft_ct: support expectation creation for natted flows 2+ messages
2026-06-30 15:55 [PATCH nf] netfilter: nft_set_rbtree: reject interval-end get for open intervals 2+ messages
2026-06-30 9:40 [PATCH nf,v2 1/3] netfilter: flowtable: use dst in this direction when pushing IPIP header 7+ messages
2026-06-30 6:57 [PATCH v2 0/5] netfilter: nf_flow_table_path: L2 bridge offload 8+ messages
2026-06-30 6:03 [PATCH nf-next v2] netfilter: nft_ct: support expectation creation for natted flows 4+ messages
2026-06-30 4:52 [PATCH net 0/9] netfilter: updates for net 17+ messages
2026-06-29 14:39 [PATCH nf 0/3] flowtable fixes for ipip tunnels 8+ messages
2026-06-29 13:46 [PATCH nf-next] netfilter: nft_ct: support expectation creation for natted flows
2026-06-29 12:58 [PATCH nf-next v2 0/3] netfilter: conntrack: remove obsolete module parameters 4+ messages
2026-06-29 12:32 [PATCH 0/5] netfilter: nf_flow_table_path: L2 bridge offload 7+ messages
2026-06-29 9:34 [PATCH net] netfilter: nf_nat_masquerade: recalculate TCP TS offset when port is randomized 12+ messages
2026-06-28 8:05 [PATCH nf 1/1] netfilter: xt_u32: reject invalid shift counts
2026-06-27 16:05 [PATCH 1/1] ipvs: preserve conn hash flags when late-binding dest 8+ messages
2026-06-26 22:25 [PATCH] netfilter: x_tables: replace strlcat() with snprintf() 4+ messages
2026-06-26 21:23 OpenWRT bounty for strong host behavior
2026-06-26 12:31 [PATCH nf-next 0/3] netfilter: conntrack: remove obsolete module parameters 4+ messages
2026-06-26 11:40 [PATCH nf] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master
2026-06-26 11:24 [PATCH nf] netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
2026-06-26 6:49 [PATCH nf 1/1] netfilter: nf_conntrack_sip: guard against missing skb dst 4+ messages
2026-06-25 17:25 [PATCH nf-next v2 1/3] netfilter: nf_conntrack_h323_main: replace u_int8_t with u8 4+ messages
2026-06-25 13:31 [PATCH nf-next] netfilter: remove redundant null check before kvfree()
2026-06-25 8:44 [PATCH nf 3/3] netfilter: xt_tcpmss: add checkentry for parameter validation
2026-06-25 8:44 [PATCH nf 1/3] netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
2026-06-25 8:43 [PATCH nf 2/3] netfilter: xt_dscp: add checkentry for tos match
2026-06-25 8:43 [PATCH nf 0/3] netfilter: xtables match fixes
2026-06-25 1:00 [PATCH nf] netfilter: ipset: fix race between dump and ip_set_list resize 2+ messages
2026-06-25 0:13 [PATCH nf] netfilter: nf_conntrack_expect: zero at allocation time 4+ messages
2026-06-24 19:04 [BUG] netfilter: nft_fib: NULL-ptr-deref (GPF) in nft_fib6_eval on netdev egress hook 7+ messages
2026-06-24 18:40 [PATCH nf-next 3/4] netfilter: nf_conntrack_amanda: replace u_int16_t with u16 6+ messages
2026-06-24 16:12 [PATCH nft] tests: shell: add tunnel vxlan test
2026-06-24 11:51 Re: [PATCH 5.10] netfilter: nf_log: validate MAC header was set before dumping it
2026-06-23 22:15 [PATCH net 00/14] Netfilter fixes for net 16+ messages
2026-06-23 17:21 [PATCH nft,v2 1/5] libnftables: add nft_run_cmd_release() helper and use it 6+ messages
2026-06-23 10:41 [PATCH nf,v2] netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration
2026-06-23 6:14 [PATCH v2 v6.6-v6.1] netfilter: nf_tables: always walk all pending catchall elements
2026-06-23 5:46 [PATCH nf,v1 1/4] netfilter: ctnetlink: do not allow to reset helper on existing conntrack 4+ messages
2026-06-23 5:30 [PATCH nf] netfilter: nft_ct: expectation timeouts are passed in milliseconds
2026-06-23 4:37 [PATCH] libmnl: add MNL_TYPE_UARR for devlink u64 array attributes 5+ messages
2026-06-22 22:02 [PATCH nf,RESEND] netfilter: nf_conntrack_expect: store master_tuple in expectation
2026-06-22 19:49 [PATCH nf] netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration
2026-06-22 19:36 [PATCH nf] netfilter: nf_conntrack_expect: store master_tuple in expectation
2026-06-22 19:36 [PATCH nf] netfilter: nf_conntrack_expect: run expectation eviction with no helper
2026-06-22 12:05 [PATCH bpf-next v8 0/7] bpf: add icmp_send kfunc 17+ messages
2026-06-22 11:57 [PATCH nf] netfilter: ctnetlink: do not allow to reset helper on existing conntrack
2026-06-22 10:10 [PATCH nf v3 1/2] netfilter: nf_flow_table: separate tunnel route state from direct xmit 3+ messages
2026-06-20 22:27 [PATCH net,v2 00/14] Netfilter fixes for net 17+ messages
2026-06-20 8:37 [PATCH] minor spelling and grammar fixes in doc 3+ messages
2026-06-19 11:54 [PATCH net 00/16] Netfilter fixes for net 18+ messages
2026-06-19 9:28 [PATCH v6.1 0/3] Fix CVE-2026-23272 5+ messages
2026-06-18 22:34 [PATCH nf] netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
2026-06-18 16:31 [PATCH nf] netfilter: nf_conntrack_expect: store master_tuple in expectation
2026-06-18 12:58 [PATCH nf] netfilter: ip6t_ah: validate AH header length 3+ messages
2026-06-18 11:56 [PATCH nf,v6] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
2026-06-18 11:17 [nft PATCH] tests: shell: Run tests with a fixed TZ 2+ messages
2026-06-18 8:49 [PATCH nf] netfilter: nf_reject: skip iphdr options when looking for icmp header
2026-06-18 8:34 [PATCH v6.6-v6.1] netfilter: nf_tables: always walk all pending catchall elements 2+ messages
2026-06-18 6:25 [PATCH nf] netfilter: nft_flow_offload: zero device address for non-ether case
2026-06-18 6:16 [PATCH nf] netfilter: nft_meta_bridge: add validate callback for get operations 2+ messages
2026-06-18 4:58 [PATCH nf] netfilter: nft_payload: reject offsets exceeding 65535 bytes 2+ messages
2026-06-17 23:43 [PATCH nf,v5] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
2026-06-17 23:07 [PATCH nf,v4] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
2026-06-17 17:06 [PATCH nf v2 1/1] netfilter: nf_flow_table: separate tunnel route state from direct xmit 2+ messages
2026-06-17 16:51 [PATCH nf,v3] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
2026-06-17 11:51 [PATCH nf,v2] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
2026-06-17 8:41 [PATCH v3 5/7] netfilter: ipset: make sure gc is properly stopped 9+ messages
2026-06-16 19:19 [PATCH nf] netfilter: nft_set_pipapo: don't leak bad clone into future transaction 6+ messages
2026-06-16 19:16 [PATCH nf] netfilter: nfnetlink: make OOM conditions fatal
2026-06-16 18:34 [PATCH nf,v1] netfilter: nf_conntrack_expect: use conntrack GC to reap expectations
2026-06-16 18:29 [PATCH nf-next v3 1/4] netfilter: nf_nat_ftp: replace u_int16_t with u16 5+ messages
2026-06-16 6:30 [PATCH 5.10/5.15/6.1/6.6/6.12/6.18] ipvs: skip ipv6 extension headers for csum checks
2026-06-16 5:42 [PATCH bpf-next 0/2] bpf: Guard conntrack opts error writes 10+ messages
2026-06-15 18:10 [PATCH nf] netfilter: nft_compat: ebtables emulation must reject non-bridge targets
2026-06-15 13:38 [PATCH nf-next v2 1/6] netfilter: nf_nat_ftp: replace u_int16_t with u16 7+ messages
2026-06-15 9:18 [PATCH nf v2] netfilter: flowtable: fix and simplify IP6IP6 tunnel handling
2026-06-15 0:38 Re: [netfilter-nf-next:for-netdev-nf-next-26-06-14 3/11] net/netfilter/nf_conncount.c:502:18: sparse: sparse: incompatible types in comparison expression (different address spaces):
2026-06-14 11:45 [PATCH net-next 00/11] Netfilter/IPVS updates for net-next 14+ messages
2026-06-14 5:25 [PATCH net-next] netfilter: x_tables.h: fix all kernel-doc warnings
2026-06-14 5:24 [PATCH] kdoc: xforms_lists: handle DECLARE_PER_CPU() in kernel-doc 2+ messages
2026-06-13 10:27 [PATCH nf 0/1] netfilter: xt_nat: bridge nft_compat rule can trigger NULL-deref 10+ messages
2026-06-12 20:39 [PATCH 6.1.y] netfilter: ctnetlink: ensure safe access to master conntrack 2+ messages
2026-06-12 20:24 [PATCH 6.6.y] netfilter: ctnetlink: ensure safe access to master conntrack 4+ messages
2026-06-12 12:51 [PATCH nf-next 0/6] netfilter: replace u_int*_t with kernel int types
2026-06-12 9:22 [PATCH v2 net-next 0/2] netdevsim: add fake FT/CLS_FLOWER offload 4+ messages
2026-06-09 11:55 [Kernel Bug] INFO: task hung in xt_find_table 5+ messages
2026-06-08 5:43 [PATCH nf v5 1/1] bridge: br_netfilter: pin bridge device while NFQUEUE holds fake dst 4+ messages
2026-06-05 11:47 [PATCH 1/1] netfilter: nf_tables_offload: drop device refcount on error 2+ messages
2026-06-03 19:29 [nft PATCH 0/6] Eliminate variable declarations in switch cases 9+ messages
2026-06-03 18:47 [nft PATCH] intervals: Fix for inconsistent union field use 2+ messages
2026-06-01 19:30 [PATCH 0/9 nf-next] netfilter: replace raw warnings with 16+ messages
2026-05-27 17:37 [conntrack-tools] conntrack.8: Document --stats counters 4+ messages
2026-05-25 20:11 [PATCH] netfilter: TCPMSS: fix dropped packets when MSS option is unaligned 20+ messages
2026-03-14 14:03 [regression] Network failure beyond first connection after 69894e5b4c5e ("netfilter: nft_connlimit: update the count if add was skipped") 12+ messages
2025-08-21 9:12 [PATCH 2/7 nft v3] tunnel: add erspan support 15+ messages
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox