#Netfilter
LightNews LightNews
devosp-akansha.bsky.social
Was adding a NAT rule to fix mail deliverability on my home server.
AI suggested a new package netfilter-persistent. I got excited
That's where I lost the game.
Turns out ufw and netfilter-persistent both packages want to own firewall-restore at boot, so apt resolves the conflict by removing one.
Omg Crying Cat
ALT: Omg Crying Cat
static.klipy.com
September 23, 2026 at 12:06 PM
lea-linux.org
bah oui.
c'est comme netfilter, quand tu sais pas trop où vont les paquets, tu utilises floufilter.
ahpnils.bsky.social Nils @ahpnils.bsky.social · Nov 28
Dites, en cas de pluie, faut-il appeler #IPSec IPMouillé ?
Et tant qu’on y est, en Wi-Fi, faut-il appeler Wireguard Wifiguard ?
/me sort
November 28, 2025 at 8:15 PM
invoxiplaygames.uk
Please crack steam netfilter encryption key it would be so funny
January 13, 2025 at 4:37 PM
iximiuz.bsky.social
How Container Networking Works 🧵

1/6: Network namespaces (netns)

A separate network namespace gives a Linux container its own virtualized (and fully isolated from the host) network "context" - a loopback device, a route table, netfilter/iptables rules, etc.
January 10, 2025 at 12:23 PM
invoxiplaygames.uk
i should probably add support for new netfilter to my Steam MITM tool and then put it up on github
January 11, 2025 at 4:50 PM
vincent.bernat.ch
hack3ric/flow: BGP flowspec executor (Flowspec implementation for Linux, including the Netfilter part)
github.com/hack3ric/flow
GitHub - hack3ric/flow: BGP flowspec executor
BGP flowspec executor. Contribute to hack3ric/flow development by creating an account on GitHub.
github.com
November 22, 2024 at 8:51 PM
invoxiplaygames.uk
oh does steam not use netfilter anymore by default boooo websockets are wokesockets
January 13, 2025 at 4:43 PM
alexandreborges.bsky.social
OtterRoot: Netfilter Universal Root 1-day (by my colleague Pedro @0xten.bsky.social):

osec.io/blog/2024-11...

#linux #vulnerability #doublefree #kernel #cybersecurity #exploitation
OtterRoot: Netfilter Universal Root 1-day
A peek into the state of Linux kernel security and the open-source patch-gap. We explore how we monitored commits to find new bug fixes and achieved 0day-like capabilities by exploiting a 1-day vulner...
osec.io
December 2, 2024 at 5:49 PM
infosec.skyfleet.blue
Linux Kernel netfilter Vulnerability Let Attackers Escalate Privileges
Linux Kernel netfilter Vulnerability Let Attackers Escalate Privileges
cybersecuritynews.com
August 18, 2025 at 2:14 PM
samilaiho.com
CISA warns ransomware gangs exploit CVE-2024-1086, a Linux kernel flaw in
netfilter: nf_tables, introduced in 2014 and patched in Jan 2024.
securityaffairs.com/184076/secur...
Old Linux Kernel flaw CVE-2024-1086 resurfaces in ransomware attacks
CISA warns ransomware gangs exploit CVE-2024-1086, a Linux kernel flaw in netfilter: nf_tables, introduced in 2014 and patched in Jan 2024.
securityaffairs.com
November 1, 2025 at 1:15 PM
standup.thecompound.tech
Ubuntu USN-8819-2 fixes Linux kernel CVE-2025-38724, CVE-2026-53131 and CVE-2026-53221 in NFS, IPv6 and Netfilter; affected hosts need the update. #software
USN-8819-2: Linux kernel vulnerabilities
September 25, 2026 at 12:13 PM
thehackerwire.bsky.social
🟠 CVE-2026-97417 - High (7.5)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack: use...

https://www.thehackerwire.com/vulnerability/CVE-2026-97417/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-97417 - High
September 25, 2026 at 7:33 AM
petrockette.bsky.social
Well, the NT kernel (derived from the DEC kernel) was far far better than the Linux kernel for many years. It's still not quite as good, though it has caught up in many areas and even surpassed it in a few

For example, Linux only got a decent netfilter (nftables) in 2014
January 18, 2025 at 1:29 AM
euvd-bot.bsky.social
🚨 EUVD-2026-86907
📊 n/a
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()

sip_skip_whitespace() ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-86907

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 11:03 AM
euvd-bot.bsky.social
🚨 EUVD-2026-86030
📊 7.5/10
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()

The timestamp-only fas...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-86030

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 6:01 AM
euvd-bot.bsky.social
🚨 EUVD-2026-86740
📊 7.0/10
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

netfilter: cttimeout: prevent UAF during module unload

nf_ct_set_timeout() protects th...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-86740

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 4:03 PM
breakawaybilly.bsky.social
"Tracing (filtered) packets in the Linux networking stack, using eBPF probes and interfacing with control and data paths such as OvS or Netfilter"
GitHub - retis-org/retis: Tracing packets in the Linux networking stack & friends
Tracing packets in the Linux networking stack & friends - retis-org/retis
buff.ly
January 2, 2025 at 9:30 AM
opsecaddiction.lol
you start with “i want to host a website” and somehow end up thinking about socket binding, netfilter hooks, conntrack state, NAT, routing tables, MTU, reverse path filtering and whether your ISP is sticking you behind CGNAT bro
September 24, 2026 at 6:19 AM
euvd-bot.bsky.social
🚨 EUVD-2026-86739
📊 7.0/10
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_log: unregister loggers before per-net teardown

nf_log_syslog and nfnetl...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-86739

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 4:03 PM
euvd-bot.bsky.social
🚨 EUVD-2026-86167
📊 7.8/10
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state

sashik...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-86167

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 6:03 AM
euvd-bot.bsky.social
🚨 EUVD-2026-87067
📊 n/a
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet

sashiko says:
If map_ad...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87067

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 2:02 PM
mastelek.bsky.social
Discover how Netfilter supports Linux's network security with packet filtering & NAT
#Linux #netfilter
Netfilter | The Backbone of Linux Packet Filtering 🚀🔥💡
Discover how Netfilter supports Linux's network security with packet filtering & NAT
hubandspoke.amastelek.com
March 4, 2025 at 11:31 AM
raptor.infosec.exchange.ap.brid.gy
CVE-2023-52927: Turning a Forgotten #syzkaller Report into #kctf #exploit

https://qriousec.github.io/post/cve-2023-52927/
CVE-2023-52927: Turning a Forgotten Syzkaller Report into kCTF Exploit
Table of Contents I. Introduction II. Netfilter hooks, nf_tables, nf_conntrack, nf_nat and nf_queue 2.1 Netfilter hooks 2.2 nf_tables 2.3 nf_conntrack 2.4 nf_nat 2.5 nf_queue III. The Forgotten Syzkaller Report IV. Root Cause Analysis of a “no reproducer” Syzkaller UAF Report 4.1 Allocation Backtrace 4.2 Free Backtrace 4.3 UAF Backtrace 4.4 Root Cause V. Crafting a Reproducer to Trigger the KASAN UAF 5.1 Allocate a template nf_conn by calling nft_ct_set_zone_eval() 5.2 Setup nf_nat_setup_info() function 5.
qriousec.github.io
July 10, 2025 at 8:05 PM
crawler.baldanders.info
＞ USN-8730-6: Linux kernel (Intel IoTG) vulnerability
https://ubuntu.com/security/notices/USN-8730-6
USN-8730-6: Linux kernel (Intel IoTG) vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;
ubuntu.com
September 25, 2026 at 3:40 PM