summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2023-05-24netfilter: nft_set_rbtree: fix null deref on element insertionFlorian Westphal
2023-05-24netfilter: nf_tables: fix nft_trans type confusionFlorian Westphal
2023-05-24ipvs: Update width of source for ip_vs_sync_conn_optionsSimon Horman
2023-05-24netfilter: conntrack: fix possible bug_on with enable_hooks=1Florian Westphal
2023-05-24netfilter: nf_tables: always release netdev hooks from notifierFlorian Westphal
2023-05-11netfilter: nf_tables: deactivate anonymous set from preparation phasePablo Neira Ayuso
2023-05-11netfilter: nf_tables: don't write table validation state without mutexFlorian Westphal
2023-05-11netfilter: conntrack: fix wrong ct->timeout valueTzung-Bi Shih
2023-05-11netfilter: conntrack: restore IPS_CONFIRMED out of nf_conntrack_hash_check_in...Pablo Neira Ayuso
2023-04-26netfilter: nf_tables: tighten netlink attribute requirements for catch-all el...Pablo Neira Ayuso
2023-04-26netfilter: nf_tables: validate catch-all set elementsPablo Neira Ayuso
2023-04-26netfilter: nf_tables: Modify nla_memdup's flag to GFP_KERNEL_ACCOUNTChen Aotian
2023-03-22netfilter: nft_redir: correct value of inet type `.maxattrs`Jeremy Sowden
2023-03-22netfilter: nft_redir: correct length for loading protocol registersJeremy Sowden
2023-03-22netfilter: nft_masq: correct length for loading protocol registersJeremy Sowden
2023-03-22netfilter: nft_nat: correct length for loading protocol registersJeremy Sowden
2023-03-17netfilter: conntrack: adopt safer max chain lengthEric Dumazet
2023-03-17netfilter: ctnetlink: revert to dumping mark regardless of event typeIvan Delalande
2023-03-17netfilter: nft_quota: copy content when cloning expressionPablo Neira Ayuso
2023-03-17netfilter: nft_last: copy content when cloning expressionPablo Neira Ayuso
2023-03-11netfilter: ctnetlink: make event listener tracking globalFlorian Westphal
2023-03-11netfilter: xt_length: use skb len to match in length_mt6Xin Long
2023-03-11netfilter: conntrack: fix rmmod double-free raceFlorian Westphal
2023-03-11netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()Hangyu Hua
2023-03-11netfilter: nf_tables: allow to fetch set elements when table has an ownerPablo Neira Ayuso
2023-03-10netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj()Alok Tiwari
2023-02-09use less confusing names for iov_iter direction initializersAl Viro
2023-02-01netfilter: conntrack: unify established states for SCTP pathsSriram Yagnaraman
2023-02-01netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETESriram Yagnaraman
2023-02-01netfilter: nft_set_rbtree: skip elements in transaction from garbage collectionPablo Neira Ayuso
2023-02-01netfilter: nft_set_rbtree: Switch to node list walk for overlap detectionPablo Neira Ayuso
2023-02-01netfilter: conntrack: handle tcp challenge acks during connection reuseFlorian Westphal
2023-01-18netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.Gavrilov Ilia
2023-01-18netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bitsPablo Neira Ayuso
2023-01-12netfilter: ipset: Rework long task execution when adding/deleting entriesJozsef Kadlecsik
2023-01-12netfilter: ipset: fix hash:net,port,net hang with /0 subnetJozsef Kadlecsik
2023-01-12netfilter: nf_tables: honor set timeout and garbage collection updatesPablo Neira Ayuso
2023-01-12netfilter: nf_tables: perform type checking for existing setsPablo Neira Ayuso
2023-01-12netfilter: nf_tables: add function to create set stateful expressionsPablo Neira Ayuso
2023-01-12netfilter: nf_tables: consolidate set descriptionPablo Neira Ayuso
2022-12-31netfilter: flowtable: really fix NAT IPv6 offloadQingfang DENG
2022-12-31ipvs: use u64_stats_t for the per-cpu countersJulian Anastasov
2022-12-31netfilter: conntrack: set icmpv6 redirects as RELATEDFlorian Westphal
2022-11-30netfilter: ctnetlink: fix compilation warning after data race fixes in ct markPablo Neira Ayuso
2022-11-30netfilter: conntrack: fix using __this_cpu_add in preemptibleXin Long
2022-11-28netfilter: flowtable_offload: fix using __this_cpu_add in preemptibleXin Long
2022-11-28netfilter: nft_set_pipapo: Actually validate intervals in fields after the fi...Stefano Brivio
2022-11-22netfilter: flowtable_offload: add missing lockingFelix Fietkau
2022-11-22netfilter: ipset: restore allowing 64 clashing elements in hash:net,ifaceJozsef Kadlecsik
2022-11-21netfilter: ipset: regression in ip_set_hash_ip.cVishwanath Pai