Vlad Buslov df25455e5a netfilter: nf_conntrack: allow early drop of offloaded UDP conns ... Both synchronous early drop algorithm and asynchronous gc worker completely ignore connections with IPS_OFFLOAD_BIT status bit set. With new functionality that enabled UDP NEW connection offload in action CT malicious user can flood the conntrack table with offloaded UDP connections by just sending a single packet per 5tuple because such connections can no longer be deleted by early drop algorithm. To mitigate the issue allow both early drop and gc to consider offloaded UDP connections for deletion. Signed-off-by: Vlad Buslov <vladbu@nvidia.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2023-02-03 09:31:24 +00:00
..
6lowpan
9p
802
8021q
appletalk
atm
ax25
batman-adv	batman-adv: tvlv: prepare for tvlv enabled multicast packet type	2023-01-21 19:01:59 +01:00
bluetooth	net/sock: Introduce trace_sk_data_ready()	2023-01-23 11:26:50 +00:00
bpf	bpf/selftests: Verify struct_ops prog sleepable behavior	2023-01-25 10:25:57 -08:00
bpfilter
bridge	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-02-02 14:49:55 -08:00
caif
can	can: isotp: split tx timer into transmission and timeout	2023-02-02 10:33:26 +01:00
ceph	net/sock: Introduce trace_sk_data_ready()	2023-01-23 11:26:50 +00:00
core	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-02-02 14:49:55 -08:00
dcb	net: dcb: add helper functions to retrieve PCP and DSCP rewrite maps	2023-01-20 09:33:22 +00:00
dccp
devlink	devlink: rename and reorder instances of struct devlink_cmd	2023-02-01 10:57:01 -08:00
dns_resolver
dsa	net: dsa: Use sysfs_emit() to instead of sprintf()	2023-02-02 15:28:59 +01:00
ethernet
ethtool	ethtool: netlink: convert commands to common SET	2023-01-27 12:24:32 +00:00
hsr
ieee802154
ife
ipv4	tcp: add TCP_MINTTL drop reason	2023-02-02 21:14:50 -08:00
ipv6	tcp: add TCP_MINTTL drop reason	2023-02-02 21:14:50 -08:00
iucv
kcm	net/sock: Introduce trace_sk_data_ready()	2023-01-23 11:26:50 +00:00
key
l2tp	l2tp: prevent lockdep issue in l2tp_tunnel_register()	2023-01-18 14:44:54 +00:00
l3mdev
lapb
llc
mac80211	wifi: mac80211: drop extra 'e' from ieeee80211... name	2023-01-19 14:57:51 +01:00
mac802154
mctp	net: mctp: purge receive queues on sk destruction	2023-01-28 00:26:09 -08:00
mpls
mptcp	mptcp: userspace pm: use a single point of exit	2023-01-26 13:33:30 +01:00
ncsi
netfilter	netfilter: nf_conntrack: allow early drop of offloaded UDP conns	2023-02-03 09:31:24 +00:00
netlabel
netlink	netlink: annotate data races around sk_state	2023-01-23 21:35:53 -08:00
netrom	netrom: Fix use-after-free caused by accept on already connected socket	2023-01-30 07:30:47 +00:00
nfc
nsh
openvswitch	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-02-02 14:49:55 -08:00
packet	packet: add TP_STATUS_GSO_TCP for tp_status	2023-02-01 20:54:27 -08:00
phonet	net/sock: Introduce trace_sk_data_ready()	2023-01-23 11:26:50 +00:00
psample
qrtr	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-02-02 14:49:55 -08:00
rds	net: add missing includes of linux/sched/clock.h	2023-01-27 11:19:46 +00:00
rfkill	Merge wireless into wireless-next	2023-01-17 13:36:25 +02:00
rose	net/rose: Fix to not accept on connected socket	2023-01-28 00:19:57 -08:00
rxrpc	rxrpc: Kill service bundle	2023-01-31 16:38:35 +00:00
sched	net/sched: act_ct: offload UDP NEW connections	2023-02-03 09:31:24 +00:00
sctp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-02-02 14:49:55 -08:00
smc	net: add missing includes of linux/splice.h	2023-01-27 11:19:46 +00:00
strparser
sunrpc	net/sock: Introduce trace_sk_data_ready()	2023-01-23 11:26:50 +00:00
switchdev
tipc	net/sock: Introduce trace_sk_data_ready()	2023-01-23 11:26:50 +00:00
tls	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-02-02 14:49:55 -08:00
unix	net: add missing includes of linux/splice.h	2023-01-27 11:19:46 +00:00
vmw_vsock	virtio/vsock: replace virtio_vsock_pkt with sk_buff	2023-01-16 13:26:33 +00:00
wireless	wifi: wireless: deny wireless extensions on MLO-capable devices	2023-01-19 20:01:41 +02:00
x25	net/x25: Fix to not accept on connected socket	2023-01-25 09:51:04 +00:00
xdp
xfrm	netlink: provide an ability to set default extack message	2023-02-01 21:04:09 -08:00
compat.c
devres.c
Kconfig
Kconfig.debug
Makefile
socket.c
sysctl_net.c