Reviews by pablo@netfilter.org · linux-patches

All review-attestation trailers (Reviewed-by / Acked-by / Tested-by / Reported-by / Suggested-by / Co-developed-by / Reported-and-tested-by) by this address on the linux-patches archive.

100 attestations · capped at 100 most-recent. (8 Acked-by, 4 Co-developed-by, 7 Reported-by, 58 Reviewed-by, 22 Suggested-by, 1 Tested-by)

• COLD29d REVIEWED: 2 (2M) [PATCH 6.1 119/303] netfilter: nft_objref: validate objref and objrefmap expressions
  2026-08-20 · Reviewed-by
• COLD29d [PATCH 6.1 099/303] netfilter: nft_set_pipapo: use GFP_KERNEL for insertions
  2026-08-20 · Suggested-by
• COLD29d [PATCH 5.10 075/235] netfilter: nft_set_pipapo: use GFP_KERNEL for insertions
  2026-08-20 · Suggested-by
• COLD21d [PATCH 5.15 090/272] netfilter: nft_set_pipapo: use GFP_KERNEL for insertions
  2026-08-20 · Suggested-by
• COLD32d REVIEWED: 2 (2M) [PATCH 6.18 092/250] netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
  2026-08-17 · Reviewed-by
• COLD32d REVIEWED: 2 (2M) [PATCH 7.1 101/271] netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
  2026-08-17 · Reviewed-by
• COLD47d [PATCH 6.6 405/484] netfilter: nft_set_pipapo: use GFP_KERNEL for insertions
  2026-07-30 · Suggested-by
• COLD48d [PATCH 6.12 007/602] netfilter: nft_quota: use atomic64_xchg for reset
  2026-07-30 · Suggested-by
• COLD50d [PATCH 6.18 005/675] netfilter: nft_quota: use atomic64_xchg for reset
  2026-07-30 · Suggested-by
• STALE105d REVIEWED: 2 (2M) [PATCH 5.10 439/589] netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
  2026-05-30 · Reviewed-by
• STALE105d REVIEWED: 2 (2M) [PATCH 5.10 438/589] netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
  2026-05-30 · Reviewed-by
• STALE105d REVIEWED: 1 (0M) [PATCH 5.10 434/589] netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
  2026-05-30 · Suggested-by
• STALE111d REVIEWED: 2 (2M) [PATCH 5.15 578/776] netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
  2026-05-30 · Reviewed-by
• STALE111d REVIEWED: 2 (2M) [PATCH 5.15 577/776] netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
  2026-05-30 · Reviewed-by
• STALE111d REVIEWED: 1 (0M) [PATCH 5.15 573/776] netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
  2026-05-30 · Suggested-by
• STALE110d REVIEWED: 2 (2M) [PATCH 6.1 705/969] netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
  2026-05-30 · Reviewed-by
• STALE110d REVIEWED: 1 (0M) [PATCH 6.1 701/969] netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
  2026-05-30 · Suggested-by
• STALE110d REVIEWED: 2 (2M) [PATCH 6.1 706/969] netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
  2026-05-30 · Reviewed-by
• STALE115d REVIEWED: 2 (2M) [PATCH 6.6 335/508] netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
  2026-05-20 · Reviewed-by
• STALE115d REVIEWED: 2 (2M) [PATCH 6.6 334/508] netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
  2026-05-20 · Reviewed-by
• STALE115d REVIEWED: 1 (0M) [PATCH 6.6 330/508] netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
  2026-05-20 · Suggested-by
• STALE117d REVIEWED: 2 (2M) [PATCH 6.12 473/666] netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
  2026-05-20 · Reviewed-by
• STALE117d REVIEWED: 2 (2M) [PATCH 6.12 472/666] netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
  2026-05-20 · Reviewed-by
• STALE117d REVIEWED: 1 (0M) [PATCH 6.12 468/666] netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
  2026-05-20 · Suggested-by
• STALE116d REVIEWED: 1 (0M) [PATCH 6.18 661/957] netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
  2026-05-20 · Suggested-by
• STALE116d REVIEWED: 2 (2M) [PATCH 6.18 667/957] netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
  2026-05-20 · Reviewed-by
• STALE116d REVIEWED: 2 (2M) [PATCH 6.18 666/957] netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
  2026-05-20 · Reviewed-by
• STALE121d REVIEWED: 2 (2M) [PATCH 7.0 0818/1146] netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
  2026-05-20 · Reviewed-by
• STALE121d REVIEWED: 2 (2M) [PATCH 7.0 0817/1146] netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
  2026-05-20 · Reviewed-by
• STALE121d REVIEWED: 1 (0M) [PATCH 7.0 0812/1146] netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
  2026-05-20 · Suggested-by
• STALE179d REVIEWED: 2 (2M) [PATCH 6.19 135/220] netfilter: nf_flow_table_ip: reset mac header before vlan push
  2026-03-23 · Acked-by
• STALE204d [PATCH 6.19 662/781] netfilter: nft_quota: use atomic64_xchg for reset
  2026-02-25 · Suggested-by
• STALE336d REVIEWED: 2 (2M) [PATCH 6.17 116/371] netfilter: nft_objref: validate objref and objrefmap expressions
  2025-10-17 · Reviewed-by
• STALE336d REVIEWED: 2 (2M) [PATCH 6.12 073/277] netfilter: nft_objref: validate objref and objrefmap expressions
  2025-10-17 · Reviewed-by
• STALE337d REVIEWED: 2 (2M) [PATCH 6.6 050/201] netfilter: nft_objref: validate objref and objrefmap expressions
  2025-10-17 · Reviewed-by
• STALE337d [PATCH 6.12 115/140] netfilter: nf_tables: make nft_set_do_lookup available unconditionally
  2025-09-17 · Suggested-by
• STALE366d [PATCH 6.16 161/189] netfilter: nf_tables: make nft_set_do_lookup available unconditionally
  2025-09-17 · Suggested-by
• STALE431d REVIEWED: 2 (2M) [PATCH 6.1 65/88] netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
  2025-07-15 · Reviewed-by
• STALE431d REVIEWED: 2 (2M) [PATCH 6.15 151/192] netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
  2025-07-15 · Reviewed-by
• STALE431d REVIEWED: 2 (2M) [PATCH 5.15 60/77] netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
  2025-07-15 · Reviewed-by
• STALE431d REVIEWED: 2 (2M) [PATCH 6.6 083/109] netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
  2025-07-15 · Reviewed-by
• STALE431d REVIEWED: 2 (2M) [PATCH 6.12 124/163] netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
  2025-07-15 · Reviewed-by
• DORMANTno replies REVIEWED: 4 (4M) Re: [PATCH 6.6.y] netfilter: nf_tables: use timestamp to check for set element timeout
  2025-03-18 · Reviewed-by
• DORMANTno replies REVIEWED: 4 (4M) Re: [PATCH 6.6.y] netfilter: nf_tables: use timestamp to check for set element timeout
  2025-03-18 · Tested-by
• STALE675d REVIEWED: 4 (4M) [PATCH 5.4 133/462] netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  2024-11-06 · Reviewed-by
• STALE682d REVIEWED: 4 (4M) [PATCH 4.19 100/350] netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  2024-11-06 · Reviewed-by
• STALE703d REVIEWED: 4 (4M) [PATCH 5.10 201/518] netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  2024-10-15 · Reviewed-by
• STALE699d [PATCH 5.15 649/691] netfilter: xtables: avoid NFPROTO_UNSPEC where needed
  2024-10-15 · Co-developed-by
• STALE699d REVIEWED: 4 (4M) [PATCH 5.15 291/691] netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  2024-10-15 · Reviewed-by
• STALE705d [PATCH 6.1 756/798] netfilter: xtables: avoid NFPROTO_UNSPEC where needed
  2024-10-14 · Co-developed-by
• STALE705d REVIEWED: 4 (4M) [PATCH 6.1 263/798] netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  2024-10-14 · Reviewed-by
• STALE705d [PATCH 6.6 149/213] netfilter: xtables: avoid NFPROTO_UNSPEC where needed
  2024-10-14 · Co-developed-by
• STALE704d [PATCH 6.11 134/214] netfilter: xtables: avoid NFPROTO_UNSPEC where needed
  2024-10-14 · Co-developed-by
• STALE658d REVIEWED: 4 (4M) [PATCH 6.6 371/538] netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  2024-10-02 · Reviewed-by
• STALE716d REVIEWED: 4 (4M) [PATCH 6.10 436/634] netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  2024-10-02 · Reviewed-by
• STALE714d REVIEWED: 4 (4M) [PATCH 6.11 478/695] netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  2024-10-02 · Reviewed-by
• STALE721d REVIEWED: 3 (3M) [PATCH 6.1 60/73] netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
  2024-09-27 · Acked-by
• STALE721d REVIEWED: 3 (3M) [PATCH 6.11 07/12] netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
  2024-09-27 · Acked-by
• STALE719d REVIEWED: 3 (3M) [PATCH 6.10 52/58] netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
  2024-09-27 · Acked-by
• STALE721d REVIEWED: 3 (3M) [PATCH 6.6 44/54] netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
  2024-09-27 · Acked-by
• STALE746d REVIEWED: 4 (4M) [PATCH 5.15 198/215] gtp: fix a potential NULL pointer dereference
  2024-09-01 · Reviewed-by
• STALE746d REVIEWED: 2 (2M) [PATCH 5.15 108/215] gtp: pull network headers in gtp_dev_xmit()
  2024-09-01 · Reviewed-by
• STALE739d REVIEWED: 4 (4M) [PATCH 5.10 139/151] gtp: fix a potential NULL pointer dereference
  2024-09-01 · Reviewed-by
• STALE739d REVIEWED: 2 (2M) [PATCH 5.10 082/151] gtp: pull network headers in gtp_dev_xmit()
  2024-09-01 · Reviewed-by
• STALE747d REVIEWED: 4 (4M) [PATCH 6.1 51/71] gtp: fix a potential NULL pointer dereference
  2024-09-01 · Reviewed-by
• STALE739d REVIEWED: 4 (4M) [PATCH 5.4 120/134] gtp: fix a potential NULL pointer dereference
  2024-09-01 · Reviewed-by
• STALE739d REVIEWED: 2 (2M) [PATCH 5.4 074/134] gtp: pull network headers in gtp_dev_xmit()
  2024-09-01 · Reviewed-by
• STALE747d REVIEWED: 4 (4M) [PATCH 6.10 107/149] gtp: fix a potential NULL pointer dereference
  2024-09-01 · Reviewed-by
• STALE747d REVIEWED: 4 (4M) [PATCH 6.6 65/93] gtp: fix a potential NULL pointer dereference
  2024-09-01 · Reviewed-by
• STALE746d REVIEWED: 4 (4M) [PATCH 4.19 88/98] gtp: fix a potential NULL pointer dereference
  2024-09-01 · Reviewed-by
• STALE746d REVIEWED: 2 (2M) [PATCH 4.19 52/98] gtp: pull network headers in gtp_dev_xmit()
  2024-09-01 · Reviewed-by
• STALE669d REVIEWED: 2 (2M) [PATCH 6.1 208/321] gtp: pull network headers in gtp_dev_xmit()
  2024-08-27 · Reviewed-by
• STALE752d REVIEWED: 2 (2M) [PATCH 6.10 089/273] gtp: pull network headers in gtp_dev_xmit()
  2024-08-27 · Reviewed-by
• STALE749d REVIEWED: 2 (2M) [PATCH 6.6 221/341] gtp: pull network headers in gtp_dev_xmit()
  2024-08-27 · Reviewed-by
• STALE815d [PATCH 6.6 100/192] netfilter: move the sysctl nf_hooks_lwtunnel into the netfilter core
  2024-06-25 · Suggested-by
• STALE811d [PATCH 6.9 138/250] netfilter: move the sysctl nf_hooks_lwtunnel into the netfilter core
  2024-06-25 · Suggested-by
• STALE811d [PATCH 4.19 178/213] netfilter: nf_tables: fix memleak when more than 255 elements expired
  2024-06-13 · Reported-by
• STALE873d REVIEWED: 1 (0M) [PATCH 5.10 037/138] netfilter: nft_set_pipapo: do not free live element
  2024-04-30 · Reported-by
• STALE873d REVIEWED: 2 (2M) [PATCH 5.10 014/138] netfilter: complete validation of user input
  2024-04-30 · Reviewed-by
• STALE876d REVIEWED: 1 (0M) [PATCH 5.15 18/71] netfilter: nft_set_pipapo: do not free live element
  2024-04-23 · Reported-by
• STALE874d REVIEWED: 1 (0M) [PATCH 6.1 037/141] netfilter: nft_set_pipapo: do not free live element
  2024-04-23 · Reported-by
• STALE876d REVIEWED: 1 (0M) [PATCH 6.6 036/158] netfilter: nft_set_pipapo: do not free live element
  2024-04-23 · Reported-by
• STALE878d REVIEWED: 1 (0M) [PATCH 6.8 019/158] netfilter: nft_set_pipapo: do not free live element
  2024-04-23 · Reported-by
• STALE887d REVIEWED: 2 (2M) [PATCH 5.15 18/45] netfilter: complete validation of user input
  2024-04-15 · Reviewed-by
• STALE887d REVIEWED: 2 (2M) [PATCH 6.1 28/69] netfilter: complete validation of user input
  2024-04-15 · Reviewed-by
• STALE884d REVIEWED: 2 (2M) [PATCH 6.6 054/122] netfilter: complete validation of user input
  2024-04-15 · Reviewed-by
• STALE887d REVIEWED: 2 (2M) [PATCH 6.8 081/172] netfilter: complete validation of user input
  2024-04-15 · Reviewed-by
• STALE885d REVIEWED: 2 (2M) [PATCH 5.10 209/294] netfilter: validate user input for expected length
  2024-04-11 · Reviewed-by
• STALE894d REVIEWED: 2 (2M) [PATCH 5.15 639/690] netfilter: validate user input for expected length
  2024-04-08 · Reviewed-by
• STALE874d REVIEWED: 2 (2M) [PATCH 6.8 091/273] netfilter: validate user input for expected length
  2024-04-08 · Reviewed-by
• STALE894d REVIEWED: 2 (2M) [PATCH 6.6 098/252] netfilter: validate user input for expected length
  2024-04-08 · Reviewed-by
• STALE894d REVIEWED: 2 (2M) [PATCH 6.1 043/138] netfilter: validate user input for expected length
  2024-04-08 · Reviewed-by
• STALE929d [PATCH 5.15 24/84] netfilter: bridge: confirm multicast packets before passing them up the stack
  2024-03-04 · Suggested-by
• STALE928d [PATCH 6.1 058/215] netfilter: bridge: confirm multicast packets before passing them up the stack
  2024-03-04 · Suggested-by
• STALE928d [PATCH 6.6 033/143] netfilter: bridge: confirm multicast packets before passing them up the stack
  2024-03-04 · Suggested-by
• STALE921d [PATCH 6.7 035/162] netfilter: bridge: confirm multicast packets before passing them up the stack
  2024-03-04 · Suggested-by
• STALE934d REVIEWED: 2 (2M) [PATCH 5.15 164/245] netfilter: nf_tables: add rescheduling points during loop detection walks
  2024-02-27 · Acked-by
• STALE984d REVIEWED: 3 (2M) [PATCH 6.1 126/150] net/sched: act_ct: Take per-cb reference to tcf_ct_flow_table
  2024-01-08 · Acked-by
• STALE747d REVIEWED: 3 (2M) [PATCH 6.6 032/166] net/sched: act_ct: Take per-cb reference to tcf_ct_flow_table
  2023-12-18 · Acked-by
• STALE1030d [PATCH 5.4 153/159] netfilter: nf_tables: fix memleak when more than 255 elements expired
  2023-11-24 · Reported-by