summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2024-10-04netfilter: nf_tables: missing objects with no memcg accountingPablo Neira Ayuso
2024-10-04netfilter: nf_tables: use rcu chain hook list iterator from netlink dump pathPablo Neira Ayuso
2024-10-04netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_E...Simon Horman
2024-10-04netfilter: nf_tables: Keep deleted flowtable hooks until after RCUPhil Sutter
2024-10-04netfilter: nft_dynset: annotate data-races around set timeoutPablo Neira Ayuso
2024-10-04netfilter: nf_tables: remove annotation to access set timeout while holding lockPablo Neira Ayuso
2024-10-04netfilter: nf_tables: reject expiration higher than timeoutPablo Neira Ayuso
2024-10-04netfilter: nf_tables: reject element expiration with no timeoutPablo Neira Ayuso
2024-10-04netfilter: nf_tables: elements with timeout below CONFIG_HZ never expirePablo Neira Ayuso
2024-09-30netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtre...Dan Carpenter
2024-09-30netfilter: nft_socket: make cgroupsv2 matching work with namespacesFlorian Westphal
2024-09-18netfilter: nft_socket: fix sk refcount leaksFlorian Westphal
2024-09-12netfilter: nf_conncount: fix wrong variable typeYunjian Wang
2024-08-29netfilter: flowtable: validate vlan headerPablo Neira Ayuso
2024-08-29netfilter: nft_counter: Synchronize nft_counter_reset() against reader.Sebastian Andrzej Siewior
2024-08-29netfilter: nft_counter: Disable BH in nft_counter_offload_stats().Sebastian Andrzej Siewior
2024-08-29netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requestsPhil Sutter
2024-08-29netfilter: nf_tables: Introduce nf_tables_getobj_singlePhil Sutter
2024-08-29netfilter: nf_tables: Audit log dump reset after the factPhil Sutter
2024-08-29netfilter: nf_queue: drop packets with cloned unconfirmed conntracksFlorian Westphal
2024-08-29netfilter: flowtable: initialise extack before useDonald Hunter
2024-08-29netfilter: nfnetlink: Initialise extack before use in ACKsDonald Hunter
2024-08-03netfilter: nft_set_pipapo_avx2: disable softinterruptsFlorian Westphal
2024-08-03ipvs: properly dereference pe in ip_vs_add_serviceChen Hanxiao
2024-08-03netfilter: nf_set_pipapo: fix initial map fillFlorian Westphal
2024-08-03netfilter: ctnetlink: use helper function to calculate expect IDPablo Neira Ayuso
2024-08-03ipvs: Avoid unnecessary calls to skb_is_gso_sctpIsmael Luceno
2024-07-11netfilter: nf_tables: prefer nft_chain_validateFlorian Westphal
2024-07-11netfilter: nfnetlink_queue: drop bogus WARN_ONFlorian Westphal
2024-07-04netfilter: nf_tables: unconditionally flush pending work before notifierFlorian Westphal
2024-06-27netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registersPablo Neira Ayuso
2024-06-24netfilter: fix undefined reference to 'netfilter_lwtunnel_*' when CONFIG_SYSC...Jianguo Wu
2024-06-19netfilter: move the sysctl nf_hooks_lwtunnel into the netfilter coreJianguo Wu
2024-06-19netfilter: ipset: Fix suspicious rcu_dereference_protected()Jozsef Kadlecsik
2024-06-11netfilter: ipset: Fix race between namespace cleanup and gc in the list:set typeJozsef Kadlecsik
2024-06-11netfilter: nft_inner: validate mandatory meta and payloadDavide Ornaghi
2024-05-29netfilter: nft_fib: allow from forward/input without iif selectorEric Garver
2024-05-29netfilter: nft_payload: skbuff vlan metadata mangle supportPablo Neira Ayuso
2024-05-20netfilter: nft_payload: restore vlan q-in-q match supportPablo Neira Ayuso
2024-05-20netfilter: ipset: Add list flush to cancel_gcAlexander Maltsev
2024-05-20netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()Eric Dumazet
2024-05-13Merge tag 'nf-next-24-05-12' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski
2024-05-10netfilter: nf_tables: allow clone callbacks to sleepFlorian Westphal
2024-05-10netfilter: nft_set_pipapo: remove dirty flagFlorian Westphal
2024-05-10netfilter: nft_set_pipapo: move cloning of match info to insert/removal pathFlorian Westphal
2024-05-10netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand cloneFlorian Westphal
2024-05-08ipvs: allow some sysctls in non-init user namespacesAlexander Mikhalitsyn
2024-05-08ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthreshAlexander Mikhalitsyn
2024-05-06netfilter: nft_set_pipapo: merge deactivate helper into callerFlorian Westphal
2024-05-06netfilter: nft_set_pipapo: prepare walk function for on-demand cloneFlorian Westphal
generated by cgit v1.2.3 (git 2.51.0) at 2026-10-13 20:45:12 +0000