aboutsummaryrefslogtreecommitdiffstats
path: root/net/xfrm
AgeCommit message (Expand)AuthorFilesLines
2 daysMerge branch 'master' of https://git.kernel.org/pub/scm/linux/kernel/git/klas...Mark Brown1-3/+2
6 daysxfrm: input: hold netns during deferred transport reinjectionZhengchuan Liang1-4/+12
6 daysxfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exitUsama Arif1-7/+8
6 daysxfrm: iptfs: reset runtime state when cloning SAsShaomin Chen1-5/+23
2026-05-14xfrm: Check for underflow in xfrm_state_mtuDavid Ahern1-3/+16
2026-05-11xfrm: ipcomp: Free destination pages on acomp errorsHerbert Xu1-4/+8
2026-05-07xfrm: route MIGRATE notifications to caller's netnsMaoyi Xie3-6/+5
2026-04-29xfrm: defensively unhash xfrm_state lists in __xfrm_state_deleteMichal Kosiorek1-6/+6
2026-04-29xfrm: cleanup error path in xfrm_add_policy()Deepanshu Kartikey1-3/+2
2026-04-29xfrm: provide message size for XFRM_MSG_MAPPINGRuijie Li1-0/+1
2026-04-28xfrm: Don't clobber inner headers when already setCosmin Ratiu1-6/+14
2026-04-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski3-9/+28
2026-04-08Merge tag 'ipsec-next-2026-04-08' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski2-21/+1
2026-04-07xfrm: Drop support for HMAC-RIPEMD-160Eric Biggers1-20/+0
2026-04-07xfrm_user: fix info leak in build_report()Greg Kroah-Hartman1-0/+1
2026-04-07xfrm_user: fix info leak in build_mapping()Greg Kroah-Hartman1-0/+1
2026-04-07xfrm: fix refcount leak in xfrm_migrate_policy_findKotlyarov Mihail1-3/+0
2026-04-07xfrm: hold dev ref until after transport_finish NF_HOOKQi Tang1-4/+14
2026-04-07xfrm: Wait for RCU readers during policy netns exitSteffen Klassert1-0/+2
2026-03-30xfrm: account XFRMA_IF_ID in aevent size calculationKeenan Dong1-2/+8
2026-03-30xfrm: clear trailing padding in build_polexpire()Yasuaki Torimaru1-0/+2
2026-03-29net: convert remaining ipv6_stub users to direct function callsFernando Fernandez Mancera3-8/+4
2026-03-26Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski6-72/+112
2026-03-24Merge tag 'ipsec-2026-03-23' of git://git.kernel.org/pub/scm/linux/kernel/git...Paolo Abeni6-72/+112
2026-03-17xfrm: iptfs: only publish mode_data after clone setupPaul Moses1-3/+3
2026-03-16xfrm: prevent policy_hthresh.work from racing with netns teardownMinwoo Ra1-0/+2
2026-03-13xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini()Hyunwoo Kim1-1/+1
2026-03-12xfrm: avoid RCU warnings around the per-netns netlink socketSabrina Dubroca1-8/+17
2026-03-12xfrm: add rcu_access_pointer to silence sparse warning for xfrm_input_afinfoSabrina Dubroca1-1/+4
2026-03-12xfrm: policy: silence sparse warning in xfrm_policy_unregister_afinfoSabrina Dubroca1-1/+1
2026-03-12xfrm: policy: fix sparse warnings in xfrm_policy_{init,fini}Sabrina Dubroca1-4/+4
2026-03-12xfrm: state: silence sparse warnings during netns exitSabrina Dubroca1-8/+10
2026-03-12xfrm: remove rcu/state_hold from xfrm_state_lookup_spi_protoSabrina Dubroca1-9/+2
2026-03-12xfrm: state: add xfrm_state_deref_prot to state_by* walk under lockSabrina Dubroca1-11/+11
2026-03-12xfrm: state: fix sparse warnings around XFRM_STATE_INSERTSabrina Dubroca1-11/+19
2026-03-12xfrm: state: fix sparse warnings in xfrm_state_initSabrina Dubroca1-12/+20
2026-03-12xfrm: state: fix sparse warnings on xfrm_state_hold_rcuSabrina Dubroca1-1/+1
2026-03-09xfrm: iptfs: fix skb_put() panic on non-linear skb during reassemblyFernando Fernandez Mancera1-0/+6
2026-03-02net: remove addr_len argument of recvmsg() handlersEric Dumazet1-1/+1
2026-03-02xfrm: iptfs: validate inner IPv4 header length in IPTFS payloadRoshan Kumar1-0/+5
2026-02-26Merge tag 'net-7.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netd...Linus Torvalds3-4/+21
2026-02-26xfrm: update outdated commentkexinsun1-1/+1
2026-02-25xfrm: call xdo_dev_state_delete during state updateSabrina Dubroca1-0/+1
2026-02-25xfrm: fix the condition on x->pcpu_num in xfrm_sa_lenSabrina Dubroca1-1/+1
2026-02-25xfrm: add missing extack for XFRMA_SA_PCPU in add_acquire and allocspiSabrina Dubroca1-1/+4
2026-02-22Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL usesKees Cook1-3/+2
2026-02-21Convert 'alloc_obj' family to use the new default GFP_KERNEL argumentLinus Torvalds3-3/+3
2026-02-21treewide: Replace kmalloc with kmalloc_obj for non-scalar typesKees Cook4-10/+11
2026-02-20Merge tag 'ipsec-2026-02-20' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski2-3/+20
2026-02-19espintcp: Fix race condition in espintcp_close()Hyunwoo Kim1-1/+1
2026-02-10Merge tag 'bpf-next-7.0' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf...Linus Torvalds1-1/+1
2026-02-09xfrm: always flush state and policy upon NETDEV_UNREGISTER eventTetsuo Handa1-1/+11
2026-02-02xfrm: skip templates check for packet offload tunnel modeLeon Romanovsky1-2/+9
2026-01-02bpf: xfrm: drop dead NULL check in bpf_xdp_get_xfrm_state()Puranjay Mohan1-1/+1
2025-12-15xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is setAntony Antony1-0/+1
2025-11-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski4-12/+36
2025-11-18Merge tag 'ipsec-2025-11-18' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski4-12/+36
2025-11-14xfrm: fix memory leak in xfrm_add_acquire()Zilin Guan1-0/+3
2025-10-30xfrm: Prevent locally generated packets from direct output in tunnel modeJianbo Liu1-1/+5
2025-10-30xfrm: Check inner packet family directly from skb_dstJianbo Liu2-2/+2
2025-10-30pfkey: Deprecate pfkeySteffen Klassert1-4/+7
2025-10-27xfrm: Skip redundant replay recheck for the hardware offload pathJianbo Liu1-8/+8
2025-10-27xfrm: Refactor xfrm_input lock to reduce contention with RSSJianbo Liu1-7/+7
2025-10-23espintcp: use datagram_poll_queue for socket readinessRalf Lici1-5/+1
2025-10-21xfrm: check all hash buckets for leftover states during netns deletionSabrina Dubroca1-4/+8
2025-10-21xfrm: set err and extack on failure to create pcpu SASabrina Dubroca1-1/+4
2025-10-21xfrm: call xfrm_dev_state_delete when xfrm_state_migrate fails to add the stateSabrina Dubroca1-1/+4
2025-10-21xfrm: make state as DEAD before final put when migrate failsSabrina Dubroca1-0/+2
2025-10-21xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were...Sabrina Dubroca1-1/+2
2025-10-21xfrm: drop SA reference in xfrm_state_update if dir doesn't matchSabrina Dubroca1-2/+6
2025-09-26Merge tag 'ipsec-next-2025-09-26' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski1-5/+5
2025-09-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-1/+4
2025-09-15xfrm: fix offloading of cross-family tunnelsSabrina Dubroca1-1/+1
2025-09-08xfrm: snmp: do not use SNMP_MIB_SENTINEL anymoreEric Dumazet1-6/+6
2025-09-01xfrm: xfrm_alloc_spi shouldn't use 0 as SPISabrina Dubroca1-0/+3
2025-08-26ipv4: Convert ->flowi4_tos to dscp_t.Guillaume Nault1-3/+3
2025-08-19xfrm: Switch to skb_dstref_steal to clear dst_entryStanislav Fomichev1-2/+8
2025-08-15xfrm: xfrm_user: use strscpy() for alg_nameMiguel GarcĂ­a1-5/+5
2025-08-07xfrm: bring back device check in validate_xmit_xfrmSabrina Dubroca1-1/+2
2025-08-07xfrm: restore GSO for SW cryptoSabrina Dubroca1-2/+7
2025-08-06xfrm: flush all states in xfrm_state_finiSabrina Dubroca1-1/+1
2025-07-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski5-53/+30
2025-07-24Merge tag 'ipsec-next-2025-07-23' of git://git.kernel.org/pub/scm/linux/kerne...Paolo Abeni2-38/+58
2025-07-24Merge tag 'ipsec-2025-07-23' of git://git.kernel.org/pub/scm/linux/kernel/git...Paolo Abeni5-53/+30
2025-07-08Revert "xfrm: destroy xfrm_state synchronously on net exit path"Sabrina Dubroca2-15/+10
2025-07-08xfrm: delete x->tunnel as we delete xSabrina Dubroca2-12/+8
2025-07-04xfrm: Skip redundant statistics update for crypto offloadJianbo Liu1-1/+6
2025-07-04xfrm: interface: fix use-after-free after changing collect_md xfrm interfaceEyal Birger1-6/+1
2025-07-02net: dst: annotate data-races around dst->obsoleteEric Dumazet1-2/+2
2025-07-02xfrm: Duplicate SPI HandlingAakash Kumar S1-29/+43
2025-07-02xfrm: ipcomp: adjust transport header after decompressingFernando Fernandez Mancera1-1/+1
2025-06-20xfrm: hold device only for the asynchronous decryptionJianbo Liu1-8/+9
2025-06-12xfrm: always initialize offload pathLeon Romanovsky3-5/+3
2025-06-08treewide, timers: Rename from_timer() to timer_container_of()Ingo Molnar2-3/+3
2025-06-03xfrm: state: use a consistent pcpu_id in xfrm_state_findSabrina Dubroca1-13/+6
2025-06-03xfrm: state: initialize state_ptrs earlier in xfrm_state_findSabrina Dubroca1-2/+2
2025-05-26Merge tag 'ipsec-next-2025-05-23' of git://git.kernel.org/pub/scm/linux/kerne...Paolo Abeni4-50/+95
2025-05-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski4-6/+10
2025-05-20xfrm: use kfree_sensitive() for SA secret zeroizationZilin Guan1-3/+3
2025-05-15xfrm: Use nested-BH locking for nat_keepalive_sk_ipv[46]Sebastian Andrzej Siewior1-10/+20
2025-05-15xfrm: prevent configuration of interface index when offload is usedLeon Romanovsky1-0/+5
2025-05-15xfrm: validate assignment of maximal possible SEQ numberLeon Romanovsky1-10/+42
2025-05-14xfrm: Sanitize marks before insertPaul Chaignon2-0/+6
2025-04-30xfrm: ipcomp: fix truesize computation on receiveSabrina Dubroca1-2/+1
2025-04-17xfrm: Refactor migration setup during the cloning processChiachang Wang1-8/+9
2025-04-17xfrm: Migrate offload configurationChiachang Wang3-6/+22
2025-04-16xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free}Cosmin Ratiu2-9/+9
2025-04-16xfrm: Remove unneeded device check from validate_xmit_xfrmCosmin Ratiu1-6/+1
2025-04-16xfrm: Use xdo.dev instead of xdo.real_devCosmin Ratiu2-4/+0
2025-04-14xfrm: Convert xfrmi_exit_batch_rtnl() to ->exit_rtnl().Kuniyuki Iwashima1-19/+15
2025-04-14espintcp: remove encap socket caching to avoid reference leakSabrina Dubroca1-3/+0
2025-04-14espintcp: fix skb leaksSabrina Dubroca1-1/+3
2025-04-11xfrm: Remove unnecessary strscpy_pad() size argumentsThorsten Blum1-5/+5
2025-04-05treewide: Switch/rename to timer_delete[_sync]()Thomas Gleixner2-6/+6
2025-03-29Merge tag 'v6.15-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds2-222/+212
2025-03-26Merge tag 'net-next-6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/ne...Linus Torvalds6-53/+84
2025-03-25Merge tag 'timers-cleanups-2025-03-23' of git://git.kernel.org/pub/scm/linux/...Linus Torvalds2-6/+4
2025-03-25Merge tag 'ipsec-next-2025-03-24' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski5-46/+76
2025-03-21xfrm: ipcomp: Use crypto_acomp interfaceHerbert Xu2-225/+212
2025-03-21xfrm: ipcomp: Call pskb_may_pull in ipcomp_inputHerbert Xu1-0/+3
2025-03-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPaolo Abeni1-1/+42
2025-03-19xfrm: Remove unnecessary NULL check in xfrm_lookup_with_ifid()Dan Carpenter1-1/+1
2025-03-12xfrm: state: make xfrm_state_lookup_byaddr locklessFlorian Westphal1-2/+2
2025-02-21net: xfrm: Use link netns in newlink() of rtnl_link_opsXiao Liang1-4/+4
2025-02-21rtnetlink: Pack newlink() params into structXiao Liang1-3/+4
2025-02-21xfrm_output: Force software GSO only in tunnel modeCosmin Ratiu1-1/+1
2025-02-21xfrm: fix tunnel mode TX datapath in packet offload modeAlexandre Cassen1-0/+41
2025-02-21xfrm: check for PMTU in tunnel mode for packet offloadLeon Romanovsky2-4/+12
2025-02-21xfrm: provide common xdo_dev_offload_ok callback implementationLeon Romanovsky1-0/+15
2025-02-21xfrm: rely on XFRM offloadLeon Romanovsky1-6/+4
2025-02-21xfrm: simplify SA initialization routineLeon Romanovsky2-13/+11
2025-02-21xfrm: delay initialization of offload path till its actually requestedLeon Romanovsky3-24/+23
2025-02-18xfrm: Switch to use hrtimer_setup()Nam Cao2-6/+4
2025-02-12xfrm: prevent high SEQ input in non-ESN modeLeon Romanovsky1-0/+12
2025-01-27Merge tag 'ipsec-2025-01-27' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski5-31/+83
2025-01-24xfrm: Don't disable preemption while looking up cache state.Sebastian Sewior1-3/+1
2025-01-20xfrm: Fix the usage of skb->skSteffen Klassert3-5/+6
2025-01-13net: remove init_dummy_netdev()Jakub Kicinski1-3/+6
2025-01-07xfrm: Support ESN context update to hardware for TXJianbo Liu1-0/+1
2024-12-05xfrm: iptfs: add tracepoint functionalityChristian Hopps2-1/+288
2024-12-05xfrm: iptfs: handle reordering of received packetsChristian Hopps1-13/+484
2024-12-05xfrm: iptfs: add skb-fragment sharing codeChristian Hopps1-6/+290
2024-12-05xfrm: iptfs: add reusing received skb for the tunnel egress packetChristian Hopps1-15/+108
2024-12-05xfrm: iptfs: handle received fragmented inner packetsChristian Hopps1-19/+461
2024-12-05xfrm: iptfs: add basic receive packet (tunnel egress) handlingChristian Hopps1-0/+276
2024-12-05xfrm: iptfs: add fragmenting of larger than MTU user packetsChristian Hopps1-28/+315
2024-12-05xfrm: iptfs: share page fragments of inner packetsChristian Hopps1-8/+77
2024-12-05xfrm: iptfs: add user packet (tunnel ingress) handlingChristian Hopps1-3/+560
2024-12-05xfrm: iptfs: add new iptfs xfrm mode implChristian Hopps2-0/+217
2024-12-05xfrm: add generic iptfs defines and functionalityChristian Hopps6-2/+37
2024-12-05xfrm: add mode_cbs module functionalityChristian Hopps6-10/+116
2024-12-05xfrm: netlink: add config (netlink) optionsChristian Hopps2-2/+60
2024-12-05xfrm: config: add CONFIG_XFRM_IPTFSChristian Hopps1-0/+16
2024-12-05xfrm: state: fix out-of-bounds read during lookupFlorian Westphal1-19/+70
2024-11-25xfrm: replay: Fix the update of replay_esn->oseq_hi for GSOJianbo Liu1-4/+6
2024-11-18Merge tag 'ipsec-next-2024-11-15' of git://git.kernel.org/pub/scm/linux/kerne...David S. Miller5-27/+255
2024-11-15xfrm: Fix acquire state insertion.Steffen Klassert1-0/+1
2024-11-14xfrm: replace deprecated strncpy with strscpy_padDaniel Yang1-1/+1
2024-11-14xfrm: Add error handling when nla_put_u32() returns an errorEverest K.C1-1/+4
2024-11-11net: convert to nla_get_*_default()Johannes Berg1-5/+3
2024-11-06xfrm: Convert struct xfrm_dst_lookup_params -> tos to dscp_t.Guillaume Nault1-1/+1
2024-11-06xfrm: Convert xfrm_dst_lookup() to dscp_t.Guillaume Nault1-5/+4
2024-11-06xfrm: Convert xfrm_bundle_create() to dscp_t.Guillaume Nault1-3/+4
2024-11-06xfrm: Convert xfrm_get_tos() to dscp_t.Guillaume Nault1-3/+3
2024-10-29xfrm: Restrict percpu SA attribute to specific netlink message typesSteffen Klassert1-0/+14
2024-10-29xfrm: Add an inbound percpu state cache.Steffen Klassert2-1/+58
2024-10-29xfrm: Cache used outbound xfrm states at the policy.Steffen Klassert2-0/+67
2024-10-29xfrm: Add support for per cpu xfrm state handling.Steffen Klassert3-17/+103
2024-10-24Merge tag 'ipsec-2024-10-22' of git://git.kernel.org/pub/scm/linux/kernel/git...Paolo Abeni3-20/+54
2024-10-11xfrm: fix one more kernel-infoleak in algo dumpingPetr Vaganov1-1/+3
2024-10-07xfrm: validate new SA's prefixlen using SA family when sel.family is unsetSabrina Dubroca1-1/+5
2024-10-02move asm/unaligned.h to linux/unaligned.hAl Viro1-1/+1
2024-09-24xfrm: policy: remove last remnants of pernet inexact listFlorian Westphal1-3/+0
2024-09-23xfrm: respect ip protocols rules criteria when performing dst lookupsEyal Birger1-0/+15
2024-09-23xfrm: extract dst lookup parameters into a structEyal Birger2-15/+31
2024-09-10Merge tag 'ipsec-next-2024-09-10' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski2-127/+101
2024-09-09xfrm: policy: Restore dir assignments in xfrm_hash_rebuild()Nathan Chancellor1-0/+2
2024-09-09xfrm: policy: fix null dereferenceFlorian Westphal1-2/+2
2024-09-09Revert "xfrm: add SA information to the offloaded packet"Steffen Klassert1-21/+0
2024-09-03netdev_features: convert NETIF_F_LLTX to dev->lltxAlexander Lobakin1-1/+1
2024-08-31xfrm: Unmask upper DSCP bits in xfrm_get_tos()Ido Schimmel1-1/+2
2024-08-28xfrm: minor update to sdb and xfrm_policy commentsFlorian Westphal1-1/+5
2024-08-28xfrm: policy: use recently added helper in more placesFlorian Westphal1-11/+2
2024-08-27xfrm: add SA information to the offloaded packetwangfe1-0/+21
2024-08-24xfrm: policy: remove remaining use of inexact listFlorian Westphal1-38/+0
2024-08-24xfrm: switch migrate to xfrm_policy_lookup_bytypeFlorian Westphal1-67/+39
2024-08-24xfrm: policy: don't iterate inexact policies twice at insert timeFlorian Westphal1-6/+53
2024-08-16xfrm: Remove documentation WARN_ON to limit return values for offloaded SAPatrisious Haddad1-5/+1
2024-07-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski4-13/+66
2024-07-14Merge tag 'ipsec-next-2024-07-13' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski8-8/+347
2024-07-14Merge tag 'ipsec-2024-07-11' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski4-13/+66
2024-07-12xfrm: Support crypto offload for inbound IPv4 UDP-encapsulated ESP packetMike Yu1-1/+2
2024-07-12xfrm: Allow UDP encapsulation in crypto offload control pathMike Yu1-3/+3
2024-07-12xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO pathMike Yu2-2/+5
2024-07-08xfrm: call xfrm_dev_policy_delete when kill policyJianbo Liu2-4/+2
2024-07-08xfrm: fix netdev reference count imbalanceJianbo Liu1-2/+1
2024-07-01xfrm: Export symbol xfrm_dev_state_delete.Steffen Klassert1-0/+1
2024-06-26xfrm: support sending NAT keepalives in ESP in UDP statesEyal Birger6-3/+338
2024-06-25xfrm: Fix unregister netdevice hang on hardware offload.Steffen Klassert1-2/+59
2024-06-17xfrm: Log input direction mismatch error in one placeAntony Antony1-5/+0