1. 96f01b5 net: xfrm: reject unrepresentable espintcp transport headers by Wyatt Feng · 2 weeks ago master testing ipsec-2026-09-07
  2. 3cf5cde xfrm: save input state data before secpath resets by Zhiling Zou · 2 weeks ago
  3. 9fa903b xfrm: hold net_device reference under RCU in bundle creation by Cen Zhang (Microsoft Security FORGE Labs) · 2 weeks ago
  4. f89416e esp: downgrade zerocopy managed frags before mutating skb frags by Maher Azzouzi · 4 weeks ago
  5. 2afb8dc xfrm: use hlist_del_init_rcu for state_cache and state_cache_input by Siwei Zhang · 6 weeks ago
  6. d2f5082 xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() by Eric Dumazet · 5 weeks ago
  7. d1ebd90 xfrm: fix compat ALLOCSPI request use-after-free by Kyle Zeng · 6 weeks ago
  8. 6973a21 ipv6: xfrm: use full sockets in local error paths by Zhiling Zou · 6 weeks ago
  9. dc33262 xfrm: iptfs: fix runt reassembly panic from short inner tot_len by Henry Martin · 6 weeks ago
  10. 42d100f xfrm: add missing RCU read lock in xfrm_send_migrate_state() by Aleksandr Nogikh · 6 weeks ago
  11. 89fefad xfrm: serialize state GC with device state flush by Chengfeng Ye · 6 weeks ago
  12. d042487 xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk() by Roshan Kumar · 7 weeks ago
  13. 4e9442c xfrm: bound nat keepalive state collection by Zihan Xi · 4 weeks ago ipsec-2026-08-18
  14. 0fda52d Revert "esp: do not unref managed frag pages in esp_ssg_unref()" by Steffen Klassert · 4 weeks ago
  15. c12cbf5 xfrm: fix xfrm_state_construct() auth-trunc leak by Zihan Xi · 7 weeks ago ipsec-2026-07-29
  16. 7bad4bd xfrm: ah6: validate routing header segments_left by Asim Viladi Oglu Manizada · 7 weeks ago
  17. 2aed51f xfrm: Fix skb double-free in xfrm_dev_direct_output() by Sanghyun Park · 8 weeks ago
  18. 763fe70 xfrm: avoid lock inversion in nat keepalive work by Zihan Xi · 8 weeks ago
  19. e1d7c5a xfrm: drop ESP-in-TCP packets with no ingress device by Zhiling Zou · 8 weeks ago
  20. deb232e xfrm: espintcp: fix UAF during close by Sabrina Dubroca · 8 weeks ago
  21. 2169772 esp: do not unref managed frag pages in esp_ssg_unref() by Maher Azzouzi · 9 weeks ago
  22. 5d9e3bf xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full by Xiang Mei · 2 months ago
  23. 3f1f755 net: openvswitch: reject oversized nested action attrs by Asim Viladi Oglu Manizada · 10 weeks ago
  24. 7410d11 macsec: fix promiscuity refcount leak in macsec_dev_open() by James Raphael Tiovalen · 10 weeks ago
  25. 389704e Merge tag 'ipsec-2026-07-10' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec by Paolo Abeni · 9 weeks ago
  26. 1cd23ca sctp: validate STALE_COOKIE cause length before reading staleness by Weiming Shi · 2 months ago
  27. a0d82fb Merge tag 'wireless-2026-07-09' of https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless by Paolo Abeni · 9 weeks ago
  28. 4fa3491 net/iucv: take a reference on the socket found in afiucv_hs_rcv() by Bryam Vargas · 10 weeks ago
  29. f2f152e ipv4: fib: free fib_alias with kfree_rcu() on insert error path by Weiming Shi · 2 months ago
  30. ec42156 ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF by Norbert Szetei · 10 weeks ago
  31. 2c7c88a Merge tag 'net-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by Linus Torvalds · 9 weeks ago
  32. f508900 macsec: don't read an unset MAC header in macsec_encrypt() by Daehyeon Ko · 2 months ago
  33. 78237e3 dibs: loopback: validate offset and size in move_data() by Dust Li · 10 weeks ago
  34. fabb881 octeontx2-af: fix VF bringup affecting PF promiscuous state by Harman Kalra · 2 months ago
  35. 24c4c88 Merge tag 'nf-26-07-08' of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf by Paolo Abeni · 9 weeks ago
  36. b62869a ethtool: rss: Fix hfunc and input_xfrm parsing on big endian by Gal Pressman · 10 weeks ago
  37. c914307 net/mlx5: Fix L3 tunnel entropy refcount leak by Li RongQing · 2 months ago
  38. 604e959 Merge tag 'batadv-net-pullrequest-20260708' of https://git.open-mesh.org/batadv by Paolo Abeni · 9 weeks ago
  39. 27f57583 net: macb: drop in-flight Tx SKBs on close by Théo Lebrun · 2 months ago
  40. c26c33e Merge branch 'fix-mana-rx-with-bounce-buffering' by Paolo Abeni · 9 weeks ago
  41. c72a0f0 net: mana: Sync page pool RX frags for CPU by Dexuan Cui · 2 months ago
  42. 2e2a83b net: mana: Validate the packet length reported by the NIC by Dexuan Cui · 2 months ago
  43. f4ef35e selftests/net: fix EVP_MD_CTX leak in tcp_mmap by Wang Yan · 2 months ago
  44. 6bad2e3 Merge tag 'hid-for-linus-2026070801' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid by Linus Torvalds · 9 weeks ago
  45. 3f7a535 ipvs: ensure inner headers in ICMP errors are in headroom by Julian Anastasov · 10 weeks ago
  46. 2f75c0f ipvs: use parsed transport offset in SCTP state lookup by Yizhou Zhao · 10 weeks ago
  47. 2500fa3 ipvs: use parsed transport offset in TCP state lookup by Yizhou Zhao · 10 weeks ago
  48. bae7ce7 ipvs: pass parsed transport offset to state handlers by Yizhou Zhao · 10 weeks ago
  49. da5b584 netfilter: handle unreadable frags by Florian Westphal · 10 weeks ago
  50. fa7395c netfilter: flowtable: support IPIP tunnel with direct xmit by Pablo Neira Ayuso · 2 months ago
  51. 6c5dcab netfilter: flowtable: IPIP tunnel hardware offload is not yet support by Pablo Neira Ayuso · 2 months ago
  52. c328b90 netfilter: flowtable: use dst in this direction when pushing IPIP header by Pablo Neira Ayuso · 2 months ago
  53. 724f326 netfilter: ipset: allocate the proper memory for the generic hash structure by Jozsef Kadlecsik · 2 months ago
  54. 6723213 netfilter: ipset: cleanup the add/del backlog when resize failed by Jozsef Kadlecsik · 2 months ago
  55. cffcf57 netfilter: ipset: exclude gc when resize is in progress by Jozsef Kadlecsik · 2 months ago
  56. 5d0c22e netfilter: ipset: mark the rcu locked areas properly by Jozsef Kadlecsik · 2 months ago
  57. e6107a4 netfilter: nft_lookup: fix catchall element handling with inverted lookups by Tamaki Yanagawa · 2 months ago
  58. 084d23f netfilter: ebtables: module names must be null-terminated by Florian Westphal · 2 months ago
  59. cbfe535 netfilter: ebtables: zero chainstack array by Florian Westphal · 2 months ago
  60. a622d2e netfilter: ebtables: terminate table name before find_table_lock() by Xiang Mei · 10 weeks ago
  61. 3b08fed netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag by Xiang Mei · 10 weeks ago
  62. 6d27e29 Merge branch 'ipv4-ipv6-fix-uaf-and-memory-leak-in-igmp-mld' by Paolo Abeni · 10 weeks ago
  63. 3546deaa ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() by Eric Dumazet · 10 weeks ago
  64. 9b26518 ipv6: mcast: Fix potential UAF in MLD delayed work by Eric Dumazet · 10 weeks ago
  65. 7b19c0f ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() by Eric Dumazet · 10 weeks ago
  66. 235acad octeontx2-pf: check DMAC extraction support before filtering by Suman Ghosh · 2 months ago
  67. b7f97ca net/sched: cake: reject overhead values that underflow length by Samuel Moelius · 2 months ago
  68. 5258b4f Merge tag 'for-net-2026-07-06' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth by Paolo Abeni · 10 weeks ago
  69. 1a3267a net: mdio: select REGMAP_MMIO instead of depending on it by Rosen Penev · 2 months ago
  70. cb8afea wifi: cfg80211: bound element ID read when checking non-inheritance by HE WEI (ギカク) · 10 weeks ago
  71. 6044470 net: usb: lan78xx: disable VLAN filter in promiscuous mode by Enrico Pozzobon · 2 months ago
  72. 7993211 ipv4: igmp: remove multicast group from hash table on device destruction by Yuyang Huang · 2 months ago
  73. 5c0e3ba net/liquidio: drop cached VF pci_dev LUT by Yuho Choi · 2 months ago
  74. d9d6d67 net: rnpgbe: fix mailbox endianness and remove pointer casts by Dong Yibo · 2 months ago
  75. 240c8d2 wifi: brcmfmac: cyw: fix heap overflow on a short auth frame by Maoyi Xie · 3 months ago
  76. 3be28e2 net/tls: Consume empty data records in tls_sw_read_sock() by Chuck Lever · 2 months ago
  77. 2a66594 wifi: brcmfmac: initialize SDIO data work before cleanup by Runyu Xiao · 3 months ago
  78. b760113 wifi: cfg80211: validate assoc response length before status and IE access by Zhao Li · 10 weeks ago
  79. d5e4586 wifi: cfg80211: validate rx/tx MLME callback frame lengths before access by Zhao Li · 10 weeks ago
  80. d0e69d9 wifi: mac80211: ibss: wait for in-flight TX on disconnect by Pagadala Yesu Anjaneyulu · 10 weeks ago
  81. 4e72459 wifi: mac80211: recalculate rx_nss on IBSS peer capability update by Shahar Tzarfati · 10 weeks ago
  82. 0c2ed18 wifi: cfg80211: use wiphy work for socket owner autodisconnect by Cen Zhang · 10 weeks ago
  83. 95fc027 wifi: mac80211: fix memory leak in ieee80211_register_hw() by Dawei Feng · 10 weeks ago
  84. f3858d5 wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock by Cen Zhang · 10 weeks ago
  85. 0e35b9b Merge tag 'mm-hotfixes-stable-2026-07-06-17-49' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm by Linus Torvalds · 10 weeks ago
  86. cead34a MAINTAINERS: update ndesaulniers by Nick Desaulniers · 4 months ago
  87. 6e1930e Bluetooth: L2CAP: fix tx ident leak for commands without a response by Stig Hornang · 3 months ago
  88. dd068ef Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() by Weiming Shi · 2 months ago
  89. fd076d8 Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length by Pauli Virtanen · 2 months ago
  90. e054c1a Bluetooth: ISO: fix malformed ISO_END/CONT handling by Pauli Virtanen · 2 months ago
  91. 9c36951 Bluetooth: btintel_pcie: Refactor FLR to use device_reprobe() by Kiran K · 2 months ago
  92. 6fef032 Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() by Siwei Zhang · 3 months ago
  93. 4bd0b27 Bluetooth: fix UAF in bt_accept_dequeue() by Yousef Alhouseen · 3 months ago
  94. bb067a9 Bluetooth: bnep: pin L2CAP connection during netdev registration by Yousef Alhouseen · 3 months ago
  95. 0f8a5dc Bluetooth: sco: Fix a race condition in sco_sock_timeout() by Sungwoo Kim · 3 months ago
  96. 384a4b2 Bluetooth: MGMT: Fix adv monitor add failure cleanup by Cen Zhang · 3 months ago
  97. 518aa95 Bluetooth: 6lowpan: hold L2CAP conn across debugfs control by Cen Zhang · 3 months ago
  98. 352a59d Bluetooth: 6lowpan: avoid untracked enable work by Cen Zhang · 3 months ago
  99. 12917f5 Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() by Siwei Zhang · 3 months ago
  100. badff6c Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() by Maoyi Xie · 3 months ago