- 8ad4e4d netfilter: xt_bpf: add overflow checks by Jann Horn · 4 years, 4 months ago
- 1bbbcf6 netfilter: ipset: use bitmap infrastructure completely by Kadlecsik József · 4 years, 5 months ago
- 2afd32b netfilter: fix a use-after-free in mtype_destroy() by Cong Wang · 4 years, 5 months ago
- a6280b6 netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present by Florian Westphal · 4 years, 5 months ago
- bd85b17 netfilter: ctnetlink: netns exit must wait for callbacks by Florian Westphal · 4 years, 7 months ago
- a4b012c ipvs: move old_secure_tcp into struct netns_ipvs by Eric Dumazet · 4 years, 8 months ago
- 0e0965a netfilter: ipset: Fix an error code in ip_set_sockfn_get() by Dan Carpenter · 4 years, 10 months ago
- 970b0ee netfilter: nf_conntrack_ftp: Fix debug output by Thomas Jarosch · 4 years, 10 months ago
- 62b0863 netfilter: conntrack: Use consistent ct id hash calculation by Dirk Morris · 4 years, 11 months ago
- 1922476 netfilter: ctnetlink: don't use conntrack/expect object addresses as id by Florian Westphal · 4 years, 10 months ago
- 43e4ea5 netfilter: nfnetlink: avoid deadlock due to synchronous request_module by Florian Westphal · 5 years ago
- 31a6e0d ipvs: do not schedule icmp errors from tunnels by Julian Anastasov · 5 years ago
- 9b04b51 netfilter: compat: initialize all fields in xt_init by Francesco Ruggeri · 5 years ago
- 54fa583 netfilter: nft_set_rbtree: check for inactive element after flag mismatch by Pablo Neira Ayuso · 5 years ago
- 2ae06da netfilter: physdev: relax br_netfilter dependency by Florian Westphal · 5 years ago
- 9204492 netfilter: nf_nat: skip nat clash resolution for same-origin entries by Martynas Pumputis · 5 years ago
- 304e1f0 ipvs: Fix signed integer overflow when setsockopt timeout by ZhangXiaoxu · 5 years ago
- deba234 netfilter: nf_tables: fix flush after rule deletion in the same batch by Pablo Neira Ayuso · 5 years ago
- 1894d7c netfilter: nf_tables: fix mismatch in big-endian system by Liping Zhang · 7 years ago
- 1231e25 netfilter: ipset: do not call ipset_nest_end after nla_nest_cancel by Pan Bian · 6 years ago
- d013a1c netfilter: seqadj: re-load tcp header pointer after possible head reallocation by Florian Westphal · 6 years ago
- 3d7eec1 ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf by Xin Long · 6 years ago
- f184d30 netfilter: xt_IDLETIMER: add sysfs filename checking routine by Taehee Yoo · 6 years ago
- 919560a netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net by Eric Westbrook · 6 years ago
- 7e1e195 netfilter: conntrack: fix calculation of next bucket number in early_drop by Vasily Khoruzhick · 6 years ago
- dc3f9ba netfilter: check for seqadj ext existence before adding it in nf_nat_setup_info by Xin Long · 7 years ago
- 3ea051b netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user by Eric Dumazet · 7 years ago
- a3db034 ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest() by Tan Hu · 6 years ago
- f29eb8e netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state by Florian Westphal · 6 years ago
- d8a77d1 netfilter: nf_conntrack: Fix possible possible crash on module loading. by Andrey Ryabinin · 6 years ago
- f6a6768 netfilter: nf_log: fix uninit read in nf_log_proc_dostring by Jann Horn · 6 years ago
- 759fb7f netfilter: nf_tables: check msg_type before nft_trans_set(trans) by Alexey Kodanev · 6 years ago
- ac378e6 netfilter: nf_queue: augment nfqa_cfg_policy by Eric Dumazet · 6 years ago
- 1712fae netfilter: nf_log: don't hold nf_log_mutex during user access by Jann Horn · 6 years ago
- 440bf5a netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain() by Taehee Yoo · 6 years ago
- 0063faa ipvs: fix buffer overflow with sync daemon and service by Julian Anastasov · 6 years ago
- f32bb2a netfilter: nf_tables: can't fail after linking rule into active rule list by Florian Westphal · 6 years ago
- 83797a7 ipvs: fix rtnl_lock lockups caused by start_sync_thread by Julian Anastasov · 6 years ago
- f51c454 netfilter: conntrack: don't call iter for non-confirmed conntracks by Florian Westphal · 7 years ago
- 2171500 netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize by Liping Zhang · 7 years ago
- c6ab7c6 netfilter: x_tables: add and use xt_check_proc_name by Florian Westphal · 6 years ago
- 3e8f962 netfilter: ctnetlink: Make some parameters integer to avoid enum mismatch by Matthias Kaehlcke · 7 years ago
- c70c7be netfilter: x_tables: unlock on error in xt_find_table_lock() by Dan Carpenter · 7 years ago
- dfe9c1d ipvs: explicitly forbid ipv6 service/dest creation if ipv6 mod is disabled by Paolo Abeni · 7 years ago
- 7ad1c43 netfilter: nft_dynset: continue to next expr if _OP_ADD succeeded by Liping Zhang · 7 years ago
- 3a04271 netfilter: nf_ct_helper: permit cthelpers with different names via nfnetlink by Liping Zhang · 7 years ago
- 87cfd7f netfilter: xt_CT: fix refcnt leak on error path by Gao Feng · 7 years ago
- db6a0cb netfilter: x_tables: pack percpu counter allocations by Florian Westphal · 8 years ago
- dac4448 netfilter: x_tables: pass xt_counters struct to counter allocator by Florian Westphal · 8 years ago
- 61346e2 netfilter: x_tables: pass xt_counters struct instead of packet counter by Florian Westphal · 8 years ago
- 034ad9d netfilter: IDLETIMER: be syzkaller friendly by Eric Dumazet · 6 years ago
- 7d10575 netfilter: nat: cope with negative port range by Paolo Abeni · 6 years ago
- af4b424 netfilter: x_tables: fix missing timer initialization in xt_LED by Paolo Abeni · 6 years ago
- 8d5c422 netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert by Cong Wang · 6 years ago
- c6f3be7 netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1() by Cong Wang · 6 years ago
- b39f3f3 netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target} by Eric Dumazet · 6 years ago
- 1099c70 netfilter: x_tables: fix int overflow in xt_alloc_table_info() by Dmitry Vyukov · 6 years ago
- 898eeca netfilter: xt_osf: Add missing permission checks by Kevin Cernekee · 7 years ago
- 2c3184e netfilter: nfnetlink_cthelper: Add missing permission checks by Kevin Cernekee · 7 years ago
- 0708a47 netfilter: nfnetlink_queue: fix secctx memory leak by Liping Zhang · 7 years ago
- 01060ac netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table by Liping Zhang · 7 years ago
- 0f0ac21 netfilter: nfnl_cthelper: Fix memory leak by Jeffy Chen · 7 years ago
- ec38fb4 netfilter: nfnl_cthelper: fix runtime expectation policy updates by Pablo Neira Ayuso · 7 years ago
- a463f9c netfilter: ipvs: Fix inappropriate output of procfs by KUWAZAWA Takuya · 7 years ago
- 0cab694 Fix handling of verdicts after NF_QUEUE by Debabrata Banerjee · 7 years ago
- 0117c75 netfilter: nf_tables: fix oob access by Florian Westphal · 8 years ago
- ea13fd4 netfilter: nft_queue: use raw_smp_processor_id() by Pablo Neira Ayuso · 8 years ago
- a23349b netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable" by Florian Westphal · 7 years ago
- 25db12f netfilter: nat: avoid use of nf_conn_nat extension by Florian Westphal · 7 years ago
- c5493c6 netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev family by Liping Zhang · 7 years ago
- f107c6d netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value. by Jarno Rajahalme · 7 years ago
- cd402b8 netfilter: nfnl_cthelper: fix incorrect helper->expect_class_max by Liping Zhang · 7 years ago
- 146561a netfilter: invoke synchronize_rcu after set the _hook_ to NULL by Liping Zhang · 7 years ago
- 4c7f54a net/netfilter/nf_conntrack_core: Fix net_conntrack_lock() by Manfred Spraul · 7 years ago
- 5f81b1f netfilter: nat: fix src map lookup by Florian Westphal · 7 years ago
- 5170d21 netfilter: nf_ct_ext: fix possible panic after nf_ct_extend_unregister by Liping Zhang · 7 years ago
- 445ea10 ipvs: SNAT packet replies only for NATed connections by Julian Anastasov · 7 years ago
- b89bd0c netfilter: synproxy: fix conntrackd interaction by Eric Leblond · 7 years ago
- ced7689 netfilter: xt_TCPMSS: add more sanity tests on tcph->doff by Eric Dumazet · 7 years ago
- c47538f netfilter: nft_log: restrict the log prefix length to 127 by Liping Zhang · 7 years ago
- fefdd79 netfilter: nf_tables: fix set->nelems counting with no NLM_F_EXCL by Pablo Neira Ayuso · 7 years ago
- d864e67 netfilter: nf_conntrack_sip: fix wrong memory initialisation by Christophe Leroy · 7 years ago
- 3eb235a netfilter: nft_set_rbtree: handle element re-addition after deletion by Pablo Neira Ayuso · 7 years ago
- 371d034 netfilter: conntrack: refine gc worker heuristics, redux by Florian Westphal · 7 years ago
- 5f7ff59 netfilter: conntrack: remove GC_MAX_EVICTS break by Florian Westphal · 7 years ago
- 8f9872b netfilter: nf_ct_helper: warn when not applying default helper assignment by Jiri Kosina · 7 years ago
- 49cdc4c netfilter: nft_range: add the missing NULL pointer check by Liping Zhang · 8 years ago
- d3e2a11 netfilter: nf_tables: fix inconsistent element expiration calculation by Anders K. Pedersen · 8 years ago
- 7223ecd netfilter: nat: switch to new rhlist interface by Florian Westphal · 8 years ago
- 728e87b netfilter: nat: fix cmp return value by Florian Westphal · 8 years ago
- abd66e9 netfilter: nft_hash: validate maximum value of u32 netlink hash attribute by Laura Garcia Liebana · 8 years ago
- 58c78e1 netfilter: nf_tables: fix oops when inserting an element into a verdict map by Liping Zhang · 8 years ago
- e0df8ca netfilter: conntrack: refine gc worker heuristics by Florian Westphal · 8 years ago
- 6114cc5 netfilter: conntrack: fix CT target for UNSPEC helpers by Florian Westphal · 8 years ago
- fb9c964 netfilter: connmark: ignore skbs with magic untracked conntrack objects by Florian Westphal · 8 years ago
- 8fbfef7 ipvs: use IPVS_CMD_ATTR_MAX for family.maxattr by WANG Cong · 8 years ago
- c17c3cd netfilter: nf_tables: destroy the set if fail to add transaction by Liping Zhang · 8 years ago
- 5747620 netfilter: ip_vs_sync: fix bogus maybe-uninitialized warning by Arnd Bergmann · 8 years ago
- f1d505b netfilter: nf_tables: fix type mismatch with error return from nft_parse_u32_check by John W. Linville · 8 years ago
- 444f901 netfilter: nf_conntrack_sip: extend request line validation by Ulrich Weber · 8 years ago