- a81a6b2 tcp: drop the hash_32() part from the index calculation by Willy Tarreau · 2 years, 8 months ago
- 3c78eea tcp: increase source port perturb table to 2^16 by Willy Tarreau · 2 years, 8 months ago
- dd82067 tcp: dynamically allocate the perturb table used by source ports by Willy Tarreau · 2 years, 8 months ago
- aa77225 tcp: add small random increments to the source port by Willy Tarreau · 2 years, 8 months ago
- 2ed413f tcp: use different parts of the port_offset for index and offset by Willy Tarreau · 2 years, 8 months ago
- 576696e secure_seq: use the 64 bits of the siphash for port offset calculation by Willy Tarreau · 2 years, 8 months ago
- 05a12e5 tcp: add some entropy in __inet_hash_connect() by Eric Dumazet · 3 years, 11 months ago
- 136b479 tcp: change source port randomizarion at connect() time by Eric Dumazet · 3 years, 11 months ago
- ca6226b xprtrdma: fix incorrect header size calculations by Colin Ian King · 4 years, 6 months ago
- 267b8fa l2tp: fix race in pppol2tp_release with session object destroy by James Chapman · 7 years ago
- 357fa38 l2tp: don't use inet_shutdown on ppp session destroy by James Chapman · 7 years ago
- 2cf73c7 ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg by Wang Yufen · 2 years, 7 months ago
- 29e13f6 tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd by Eric Dumazet · 2 years, 7 months ago
- f048349 Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" by Michal Kubecek · 2 years, 7 months ago
- c58d82a net: xfrm: unexport __init-annotated xfrm4_protocol_init() by Masahiro Yamada · 2 years, 7 months ago
- b419808 SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() by Chuck Lever · 2 years, 7 months ago
- 3db889f tcp: tcp_rtx_synack() can be called from process context by Eric Dumazet · 2 years, 7 months ago
- 94e9b75 netfilter: nf_tables: disallow non-stateful expression in sets earlier by Pablo Neira Ayuso · 2 years, 7 months ago
- 796aa10 mac80211: upgrade passive scan to active scan on DFS channels after beacon rx by Felix Fietkau · 2 years, 8 months ago
- 88cc8f96 wifi: mac80211: fix use-after-free in chanctx code by Johannes Berg · 2 years, 7 months ago
- 46585a7 rxrpc: Don't try to resend the request if we're receiving the reply by David Howells · 2 years, 7 months ago
- 61fb38c rxrpc: Fix listen() setting the bar too high for the prealloc rings by David Howells · 2 years, 7 months ago
- b342a88 sctp: read sk->sk_bound_dev_if once in sctp_rcv() by Eric Dumazet · 2 years, 8 months ago
- 9de3dc0 Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout by Ying Hsu · 2 years, 9 months ago
- a8e03bc NFC: NULL out the dev->rfkill to prevent UAF by Lin Ma · 2 years, 9 months ago
- 019ed25 rxrpc: Return an error to sendmsg if call failed by David Howells · 2 years, 7 months ago
- b0caa49 ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL by jianghaoran · 2 years, 8 months ago
- 8fea644 bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes by Liu Jian · 2 years, 9 months ago
- 8c73e7c net: af_key: check encryption module availability consistency by Thomas Bartschies · 2 years, 7 months ago
- e33a0c3 mac80211: fix rx reordering with non explicit / psmp ack policy by Felix Fietkau · 2 years, 8 months ago
- 4dbefaf net: af_key: add check for pfkey_broadcast in function pfkey_process by Jiasheng Jiang · 2 years, 8 months ago
- eccad9d NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc by Duoming Zhou · 2 years, 8 months ago
- f5f0de6 ping: fix address binding wrt vrf by Nicolas Dichtel · 2 years, 8 months ago
- 98ae14e netlink: do not reset transport header in netlink_recvmsg() by Eric Dumazet · 2 years, 8 months ago
- 5e4656b ipv4: drop dst in multicast routing path by Lokesh Dhoundiyal · 2 years, 8 months ago
- b104109 Bluetooth: Fix the creation of hdev->name by Itay Iellin · 2 years, 8 months ago
- 9a8736b net: ipv6: ensure we call ipv6_mc_down() at most once by j.nixdorf@avm.de · 2 years, 10 months ago
- 2b29404 net: sched: prevent UAF on tc_ctl_tfilter when temporarily dropping rtnl_lock by Thadeu Lima de Souza Cascardo · 2 years, 8 months ago
- 7815943 net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() by Eric Dumazet · 2 years, 8 months ago
- a93ea95 NFC: netlink: fix sleep in atomic bug when firmware download timeout by Duoming Zhou · 2 years, 8 months ago
- fa2217b nfc: replace improper check device_is_registered() in netlink related functions by Duoming Zhou · 2 years, 8 months ago
- 204b6bd Revert "SUNRPC: attempt AF_LOCAL connect on setup" by Trond Myklebust · 2 years, 8 months ago
- 5d31cc5 tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT by Eric Dumazet · 2 years, 8 months ago
- 1bdd46a ip_gre: Make o_seqno start from 0 in native mode by Peilin Ye · 2 years, 8 months ago
- 1aba176 openvswitch: fix OOB access in reserve_sfa_size() by Paolo Valerio · 2 years, 9 months ago
- dbdb962 netlink: reset network and mac headers in netlink_dump() by Eric Dumazet · 2 years, 9 months ago
- f7c51d9 net/packet: fix packet_sock xmit return value checking by Hangbin Liu · 2 years, 9 months ago
- 7d32322 nfc: nci: add flush_workqueue to prevent uaf by Lin Ma · 2 years, 9 months ago
- 2be597a xfrm: policy: match with both mark and mask on user interfaces by Xin Long · 4 years, 6 months ago
- cec05d9 SUNRPC/call_alloc: async tasks mustn't block waiting for memory by NeilBrown · 2 years, 10 months ago
- c41de54 Bluetooth: Fix use after free in hci_send_acl by Luiz Augusto von Dentz · 2 years, 10 months ago
- 5dbb771 openvswitch: Fixed nd target mask field in the flow dump. by Martin Varghese · 2 years, 9 months ago
- dffc859 net/x25: Fix null-ptr-deref caused by x25_disconnect by Duoming Zhou · 2 years, 9 months ago
- 82b3151 netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options by Pablo Neira Ayuso · 2 years, 9 months ago
- e1c5d46 af_netlink: Fix shift out of bounds in group mask calculation by Petr Machata · 2 years, 10 months ago
- 6180bbc SUNRPC: avoid race between mod_timer() and del_timer_sync() by NeilBrown · 2 years, 10 months ago
- 7b0e01a af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register by Haimin Zhang · 2 years, 10 months ago
- e82b631 llc: only change llc->dev when bind() succeeds by Eric Dumazet · 2 years, 9 months ago
- 615716a mac80211: fix potential double free on mesh join by Linus Lüssing · 2 years, 10 months ago
- 4d28522 netfilter: nf_tables: initialize registers in nft_do_chain() by Pablo Neira Ayuso · 2 years, 10 months ago
- 0a7aad9 llc: fix netdevice reference leaks in llc_ui_bind() by Eric Dumazet · 2 years, 9 months ago
- 08fe872 net: ipv6: fix skb_over_panic in __ip6_append_data by Tadeusz Struk · 2 years, 10 months ago
- b9d5772 net/packet: fix slab-out-of-bounds access in packet_recvmsg() by Eric Dumazet · 2 years, 10 months ago
- a09abc4 tcp: make tcp_read_sock() more robust by Eric Dumazet · 2 years, 10 months ago
- 855be1e nl80211: Update bss channel on channel switch for P2P_CLIENT by Sreeramya Soratkal · 2 years, 10 months ago
- e96d550 xfrm: Fix xfrm migrate issues when address family changes by Yan Yan · 3 years ago
- 01b0a8c batman-adv: Don't expect inter-netns unique iflink indices by Sven Eckelmann · 2 years, 10 months ago
- b3e3c25 batman-adv: Request iflink once in batadv-on-batadv check by Sven Eckelmann · 2 years, 10 months ago
- a7b9ab0 net-sysfs: add check for netdevice being present to speed_show by suresh kumar · 2 years, 10 months ago
- 3fc0fd7 sctp: fix kernel-infoleak for SCTP sockets by Eric Dumazet · 2 years, 10 months ago
- cad71f1 ax25: Fix NULL pointer dereference in ax25_kill_by_device by Duoming Zhou · 2 years, 10 months ago
- 19f1327 net: dcb: disable softirqs in dcbnl_flush_dev() by Vladimir Oltean · 2 years, 10 months ago
- 47cd616 mac80211: fix forwarded mesh frames AC & queue selection by Nicolas Escande · 2 years, 11 months ago
- 15be418 net: dcb: flush lingering app table entries for unregistered devices by Vladimir Oltean · 2 years, 10 months ago
- 21b27b2 netfilter: nf_queue: fix possible use-after-free by Florian Westphal · 2 years, 10 months ago
- 3155da3 netfilter: nf_queue: don't assume sk is full socket by Florian Westphal · 2 years, 10 months ago
- 80080bb xfrm: fix MTU regression by Jiri Bohac · 3 years ago
- 952d01d openvswitch: Fix setting ipv6 fields causing hw csum failure by Paul Blakey · 2 years, 10 months ago
- 45d006c gso: do not skip outer ip header in case of ipip and net_failover by Tao Liu · 2 years, 10 months ago
- 279f5274 net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends by Eric Dumazet · 2 years, 10 months ago
- aeeaa9c drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit by Eric Dumazet · 2 years, 11 months ago
- 0bb88f3 vsock: remove vsock from connected table when connect is interrupted by a signal by Seth Forshee · 2 years, 10 months ago
- c1a74f7 vsock: correct removal of socket from the list by Sunil Muthuswamy · 6 years ago
- 5bb3371 xfrm: Don't accidentally set RTO_ONLINK in decode_session4() by Guillaume Nault · 3 years ago
- 851901d ax25: improve the incomplete fix to avoid UAF and NPD bugs by Duoming Zhou · 2 years, 11 months ago
- 9839da9 tipc: rate limit warning for received illegal binding update by Jon Maloy · 2 years, 11 months ago
- 80c5293 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path by Eric Dumazet · 2 years, 11 months ago
- 175db19 tipc: improve size validations for received domain records by Jon Maloy · 2 years, 11 months ago
- 6c81b9e net: ieee802154: Return meaningful error codes from the netlink helpers by Miquel Raynal · 3 years ago
- bfce195 af_packet: fix data-race in packet_setsockopt / packet_setsockopt by Eric Dumazet · 2 years, 11 months ago
- 2cf1803 rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() by Eric Dumazet · 2 years, 11 months ago
- a2acd9e netfilter: nat: limit port clash resolution attempts by Florian Westphal · 2 years, 11 months ago
- 587ad3a netfilter: nat: remove l4 protocol port rovers by Florian Westphal · 2 years, 11 months ago
- ff3617b ipv4: tcp: send zero IPID in SYNACK messages by Eric Dumazet · 3 years ago
- daac348 ipv4: raw: lock the socket in raw_bind() by Eric Dumazet · 3 years ago
- e7b6b9e net-procfs: show net devices bound packet types by Jianguo Wu · 3 years ago
- be1ca30 net: fix information leakage in /proc/net/ptype by Congyu Liu · 3 years ago
- d32a15c ipv6_tunnel: Rate limit warning messages by Ido Schimmel · 3 years ago
- 7889b38 Bluetooth: refactor malicious adv data check by Brian Gix · 3 years, 1 month ago
- 3fb20d1 can: bcm: fix UAF of bcm op by Ziyang Xuan · 2 years, 11 months ago