summaryrefslogtreecommitdiff
path: root/net
AgeCommit message (Expand)Author
10 daysipv6: seg6: clear IPv4 control block on IPIP decapsulationKyle Zeng
10 daysnet: bridge: mcast: fix use-after-free of a master VLAN's multicast contextNorbert Szetei
10 daysxfrm: fix xfrm_state_construct() auth-trunc leakZihan Xi
10 daysxfrm: ah6: validate routing header segments_leftAsim Viladi Oglu Manizada
10 daysxfrm: drop ESP-in-TCP packets with no ingress deviceZhiling Zou
10 daysxfrm: espintcp: fix UAF during closeSabrina Dubroca
10 daystls: device: fix out-of-bounds write in tls_append_frag()Jiayuan Chen
10 daysBluetooth: hci_sync: Fix accept list UAF during suspendChengfeng Ye
10 daysBluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_even...Zijun Hu
10 daysnfc: nci: add data_len bound checks to activation parameter extractorsBryam Vargas
10 daysnet/sched: initialize noop_qdisc ownerJohannes Berg
10 daysnet/sched: Fix mirred deadlock on device recursionEric Dumazet
10 dayssmc: Use __sk_dst_get() and dst_dev_rcu() in smc_vlan_by_tcpsk().Kuniyuki Iwashima
10 dayssmc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().Kuniyuki Iwashima
10 dayssmc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().Kuniyuki Iwashima
10 dayssmc: Fix use-after-free in __pnet_find_base_ndev().Kuniyuki Iwashima
10 dayscan: j1939: make j1939_sk_bind() fail if device is no longer registeredTetsuo Handa
10 dayscan: j1939: add missing calls in NETDEV_UNREGISTER notification handlerTetsuo Handa
10 dayscan: j1939: implement NETDEV_UNREGISTER notification handlerTetsuo Handa
10 daysbpf: Remove tst_run from lwt_seg6local_prog_ops.Sebastian Andrzej Siewior
2026-08-28inet: frags: strip GSO state from fragments before reassemblyXinyang Ge
2026-08-27net: gro: properly validate BIG TCP aggregation criteriaEric Dumazet
2026-08-27Bluetooth: hci_event: validate LE Set CIG Parameters responseLaxman Acharya Padhya
2026-08-27Bluetooth: hci_event: fix LE list UAF on resetChengfeng Ye
2026-08-27mptcp: pm: fix memory leak from alloc-during-teardown raceShardul Bankar
2026-08-27Bluetooth: hci_sync: Fix advertising data UAFsChengfeng Ye
2026-08-27xfrm: fix sk_dst_cache double-free in xfrm_user_policy()Xiang Mei (Microsoft)
2026-08-27mptcp: pm: fix data race in add_addr timer callbackQing Luo
2026-08-27ipv6: fix use-after-free in ip6_finish_output2()Luxiao Xu
2026-08-27ipv4: reject undersized MTUs in ip_do_fragment()Yong Wang
2026-08-27libceph: fix OOB read in decode_watchers() via missing bounds checkPavitra Jha
2026-08-27ndisc: ndisc_send_redirect() cleanupEric Dumazet
2026-08-27nfc: nci: free destination parameters when closing a connectionLinmao Li
2026-08-27nfc: nci: fix uninit-value in the RF discover/activated NTF handlersSamuel Page
2026-08-27nfc: nci: fix out-of-bounds write in nci_target_auto_activated()Samuel Page
2026-08-27nfc: llcp: reject PDUs shorter than the LLCP headerDoruk Tan Ozturk
2026-08-27nfc: llcp: fix OOB read and u8 offset wrap in TLV parsersMuhammad Bilal
2026-08-27nfc: llcp: bound the connect_sn TLV walk to the skbDoruk Tan Ozturk
2026-08-27nfc: digital: clamp SENSF_RES length to the destination bufferDoruk Tan Ozturk
2026-08-27inet: frags: publish queues before arming timerZhiling Zou
2026-08-27inet: frags: save a pair of atomic operations in reassemblyEric Dumazet
2026-08-27inet: frags: change inet_frag_kill() to defer refcount updatesEric Dumazet
2026-08-27ipv4: frags: remove ipq_put()Eric Dumazet
2026-08-27inet: frags: add inet_frag_putn() helperEric Dumazet
2026-08-27Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup acceptAli Ahmet Memis
2026-08-23net: harmonize tstats and dstatsPaolo Abeni
2026-08-23net/x25: fix use-after-free of the socket by its timersBaul Lee
2026-08-23net/sched: cls_bpf: reject dev-bound programs bound to a different deviceJamal Hadi Salim
2026-08-23net/sched: cls_u32: skip hash tables in u32_bind_class()Zhang Changzhong
2026-08-23net/sched: act_api: fix TOCTOU NULL deref on a->goto_chainJamal Hadi Salim