mirror of
https://github.com/torvalds/linux.git
synced 2026-05-12 16:18:45 +02:00
-----BEGIN PGP SIGNATURE----- iQJdBAABCABHFiEEgKkgxbID4Gn1hq6fcJGo2a1f9gAFAmnYzgIbFIAAAAAABAAO bWFudTIsMi41KzEuMTIsMiwyDRxmd0BzdHJsZW4uZGUACgkQcJGo2a1f9gCfDw/+ KWf9fUlsE3uaxK889hfR0QU5ANQ03Ix1eVvr6Vh0Y5Za1glZDUuls0EsH0ej7/36 ZQqAu2vaevHTVZl3EhAS1vu8KBcldl36YEtvJsQXFkFuOoO3F/dBdttwAif2tzv8 ammqXOKicRHok1A3cy8R1fkGFAHpfn5BjBc68A0+SY1N2NFVdVNS9BP4p7tuSdkk JCj3TdDmBcddZ3SnY/z27S4+8jUL3e7HEAbsMApzIERcxe1w/6gEbb5Oa6AUwtHT 2SwQlUyhBa6gx2tARgUsHcck5QiW8b1tX7y1tzyo2q6rw78m1Eublib5nYCav/w8 9pSjRLlzSYBQ22e3wz7WqFXZRaM5+O38s3Moxfn/xrQblTk8CyW/5zGQJKivW9oG LEirCPbL6U6ZB/2Uy+3EvzG5TBP3cppB5sXaQfMdSQ03wvYFXMN35hb54ePZW6CX Db3lCwimOuXq+hkjVzZIU9ZmGr03oNohFX1GA0gDqrWtc9KsEKW8/KQvX61N8QK3 YEMIZ6fbMkstCY98fS3j6r6+V1he6wzcZpsqjd9FACYXtf8LQbPvoMA4BfcGR8+X iQVEZcrvdGa39VH1TQFlXJIe/Pv+9tZ+CF44MsrNyYH0mD4gTInajklO3lkw/YQj RQTHJLal9RCF9gVZRqHgkpE8vUj0mtUkp6Atz6En4mU= =C/nr -----END PGP SIGNATURE----- Merge tag 'nf-next-26-04-10' of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next Florian Westphal says: ==================== netfilter: updates for net-next 1-3) IPVS updates from Julian Anastasov to enhance visibility into IPVS internal state by exposing hash size, load factor etc and allows userspace to tune the load factor used for resizing hash tables. 4) reject empty/not nul terminated device names from xt_physdev. This isn't a bug fix; existing code doesn't require a c-string. But clean this up anyway because conceptually the interface name definitely should be a c-string. 5) Switch nfnetlink to skb_mac_header helpers that didn't exist back when this code was written. This gives us additional debug checks but is not intended to change functionality. 6) Let the xt ttl/hoplimit match reject unknown operator modes. This is a cleanup, the evaluation function simply returns false when the mode is out of range. From Marino Dzalto. 7) xt_socket match should enable defrag after all other checks. This bug is harmless, historically defrag could not be disabled either except by rmmod. 8) remove UDP-Lite conntrack support, from Fernando Fernandez Mancera. 9) Avoid a couple -Wflex-array-member-not-at-end warnings in the old xtables 32bit compat code, from Gustavo A. R. Silva. 10) nftables fwd expression should drop packets when their ttl/hl has expired. This is a bug fix deferred, its not deemed important enough for -rc8. 11) Add additional checks before assuming the mac header is an ethernet header, from Zhengchuan Liang. * tag 'nf-next-26-04-10' of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next: netfilter: require Ethernet MAC header before using eth_hdr() netfilter: nft_fwd_netdev: check ttl/hl before forwarding netfilter: x_tables: Avoid a couple -Wflex-array-member-not-at-end warnings netfilter: conntrack: remove UDP-Lite conntrack support netfilter: xt_socket: enable defrag after all other checks netfilter: xt_HL: add pr_fmt and checkentry validation netfilter: nfnetlink: prefer skb_mac_header helpers netfilter: x_physdev: reject empty or not-nul terminated device names ipvs: add conn_lfactor and svc_lfactor sysctl vars ipvs: add ip_vs_status info ipvs: show the current conn_tab size to users ==================== Link: https://patch.msgid.link/20260410112352.23599-1-fw@strlen.de Signed-off-by: Jakub Kicinski <kuba@kernel.org> |
||
|---|---|---|
| .. | ||
| caif | ||
| device_drivers | ||
| devlink | ||
| diagnostic | ||
| dsa | ||
| mac80211_hwsim | ||
| net_cachelines | ||
| pse-pd | ||
| xfrm | ||
| 6lowpan.rst | ||
| 6pack.rst | ||
| af_xdp.rst | ||
| alias.rst | ||
| arcnet-hardware.rst | ||
| arcnet.rst | ||
| atm.rst | ||
| ax25.rst | ||
| bareudp.rst | ||
| batman-adv.rst | ||
| bonding.rst | ||
| bridge.rst | ||
| can_ucan_protocol.rst | ||
| can.rst | ||
| cdc_mbim.rst | ||
| checksum-offloads.rst | ||
| dctcp.rst | ||
| devmem.rst | ||
| dns_resolver.rst | ||
| driver.rst | ||
| eql.rst | ||
| ethtool-netlink.rst | ||
| failover.rst | ||
| fib_trie.rst | ||
| filter.rst | ||
| gen_stats.rst | ||
| generic_netlink.rst | ||
| generic-hdlc.rst | ||
| gtp.rst | ||
| ieee802154.rst | ||
| ila.rst | ||
| index.rst | ||
| ioam6-sysctl.rst | ||
| iou-zcrx.rst | ||
| ip_dynaddr.rst | ||
| ip-sysctl.rst | ||
| ipsec.rst | ||
| ipv6.rst | ||
| ipvlan.rst | ||
| ipvs-sysctl.rst | ||
| iso15765-2.rst | ||
| j1939.rst | ||
| kapi.rst | ||
| kcm.rst | ||
| l2tp.rst | ||
| lapb-module.rst | ||
| mac80211-auth-assoc-deauth.txt | ||
| mac80211-injection.rst | ||
| mctp.rst | ||
| mpls-sysctl.rst | ||
| mptcp-sysctl.rst | ||
| mptcp.rst | ||
| msg_zerocopy.rst | ||
| multi-pf-netdev.rst | ||
| multiqueue.rst | ||
| napi.rst | ||
| net_dim.rst | ||
| net_failover.rst | ||
| netconsole.rst | ||
| netdev-features.rst | ||
| netdevices.rst | ||
| netfilter-sysctl.rst | ||
| netif-msg.rst | ||
| netmem.rst | ||
| nexthop-group-resilient.rst | ||
| nf_conntrack-sysctl.rst | ||
| nf_flowtable.rst | ||
| nfc.rst | ||
| oa-tc6-framework.rst | ||
| openvswitch.rst | ||
| operstates.rst | ||
| packet_mmap.rst | ||
| page_pool.rst | ||
| phonet.rst | ||
| phy-link-topology.rst | ||
| phy-port.rst | ||
| phy.rst | ||
| pktgen.rst | ||
| plip.rst | ||
| ppp_generic.rst | ||
| proc_net_tcp.rst | ||
| psp.rst | ||
| radiotap-headers.rst | ||
| rds.rst | ||
| regulatory.rst | ||
| representors.rst | ||
| rxrpc.rst | ||
| scaling.rst | ||
| sctp.rst | ||
| secid.rst | ||
| seg6-sysctl.rst | ||
| segmentation-offloads.rst | ||
| sfp-phylink.rst | ||
| skbuff.rst | ||
| smc-sysctl.rst | ||
| snmp_counter.rst | ||
| sriov.rst | ||
| statistics.rst | ||
| strparser.rst | ||
| switchdev.rst | ||
| sysfs-tagging.rst | ||
| tc-actions-env-rules.rst | ||
| tc-queue-filters.rst | ||
| tcp_ao.rst | ||
| tcp-thin.rst | ||
| team.rst | ||
| timestamping.rst | ||
| tipc.rst | ||
| tls-handshake.rst | ||
| tls-offload-layers.svg | ||
| tls-offload-reorder-bad.svg | ||
| tls-offload-reorder-good.svg | ||
| tls-offload.rst | ||
| tls.rst | ||
| tproxy.rst | ||
| tuntap.rst | ||
| udplite.rst | ||
| vrf.rst | ||
| vxlan.rst | ||
| x25-iface.rst | ||
| x25.rst | ||
| xdp-rx-metadata.rst | ||
| xsk-tx-metadata.rst | ||