kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
28 hours	selinux: check connect-related permissions on TCP Fast Open	Stephen Smalley	1	-1/+18
28 hours	apparmor: fix label can not be immediately before a declaration	John Johansen	1	-1/+2
28 hours	apparmor: put secmark label after secid lookup	Zygmunt Krynicki	1	-0/+1
28 hours	apparmor: aa_getprocattr free procattr leak on format failure	Zygmunt Krynicki	1	-0/+2
28 hours	apparmor: fix potential UAF in aa_replace_profiles	Maxime Bélair	1	-1/+3
28 hours	apparmor: grab ns lock and refresh when looking up changehat child profiles	Ryan Lee	1	-2/+31
28 hours	apparmor: aa_label_alloc use aa_label_free on alloc failure	Zygmunt Krynicki	1	-1/+1
28 hours	apparmor: check label build before no_new_privs test	Ruoyu Wang	1	-10/+15
28 hours	security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()	Andrew Morton	1	-0/+2
28 hours	KEYS: Use acquire when reading state in keyring search	Gui-Dong Han	1	-1/+1
28 hours	evm: terminate and bound the evm_xattrs read buffer	Pengpeng Hou	1	-5/+11
28 hours	apparmor: advertise the tcp fast open fix is applied	John Johansen	1	-0/+1
2026-07-04	keys: Pin request_key_auth payload in instantiate paths	Shaomin Chen	3	-8/+51
2026-07-04	KEYS: fix overflow in keyctl_pkey_params_get_2()	Jarkko Sakkinen	1	-1/+8
2026-07-04	apparmor: fix use-after-free in rawdata dedup loop	Ruslan Valiyev	2	-2/+25
2026-07-04	apparmor: mediate the implicit connect of TCP fast open sendmsg	Bryam Vargas	1	-1/+15
2026-06-19	apparmor: validate default DFA states are in bounds	Ben Hutchings	1	-12/+15
2026-06-01	security/keys: fix missed RCU read section on lookup	Linus Torvalds	1	-0/+1
2026-06-01	ima: check return value of crypto_shash_final() in boot aggregate	Daniel Hodges	1	-1/+1
2026-04-18	apparmor: fix race between freeing data and fs accessing it	John Johansen	7	-101/+153
2026-04-18	apparmor: fix race on rawdata dereference	John Johansen	4	-57/+93
2026-04-18	apparmor: fix differential encoding verification	John Johansen	2	-4/+20
2026-04-18	apparmor: fix unprivileged local user can do privileged policy management	John Johansen	3	-11/+52
2026-04-18	apparmor: Fix double free of ns_name in aa_replace_profiles()	John Johansen	1	-0/+1
2026-04-18	apparmor: fix missing bounds check on DEFAULT table in verify_dfa()	Massimiliano Pellizzer	1	-2/+3
2026-04-18	apparmor: fix side-effect bug in match_char() macro usage	Massimiliano Pellizzer	1	-10/+20
2026-04-18	apparmor: fix: limit the number of levels of policy namespaces	John Johansen	2	-0/+4
2026-04-18	apparmor: replace recursive profile removal with iterative approach	Massimiliano Pellizzer	1	-3/+27
2026-04-18	apparmor: fix memory leak in verify_header	Massimiliano Pellizzer	1	-1/+0
2026-04-18	apparmor: validate DFA start states are in bounds in unpack_pdb	Massimiliano Pellizzer	1	-2/+19
2026-03-25	xen/privcmd: add boot control for restricted usage in domU	Juergen Gross	1	-0/+1
2026-03-04	apparmor: fix invalid deref of rawdata when export_binary is unset	Georgia Garcia	1	-0/+9
2026-03-04	apparmor: fix rlimit for posix cpu timers	John Johansen	1	-0/+5
2026-03-04	apparmor: fix NULL sock in aa_sock_file_perm	John Johansen	1	-2/+4
2026-03-04	smack: /smack/doi: accept previously used values	Konstantin Andreev	1	-26/+45
2026-03-04	smack: /smack/doi must be > 0	Konstantin Andreev	1	-5/+7
2026-01-11	KEYS: trusted: Fix a memory leak in tpm2_load_cmd	Jarkko Sakkinen	1	-2/+4
2026-01-11	ima: Handle error code returned by ima_filter_rule_match()	Zhao Yipeng	1	-1/+1
2026-01-11	smack: fix bug: unprivileged task can create labels	Konstantin Andreev	1	-14/+27
2025-10-19	KEYS: trusted_tpm1: Compare HMAC values in constant time	Eric Biggers	1	-3/+4
2025-08-28	apparmor: use the condition in AA_BUG_FMT even with debug disabled	Mateusz Guzik	1	-1/+5
2025-08-28	securityfs: don't pin dentries twice, once is enough...	Al Viro	1	-2/+0
2025-08-15	apparmor: ensure WB_HISTORY_SIZE value is a power of 2	Ryan Lee	2	-1/+3
2025-06-27	selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len	Stephen Smalley	1	-1/+1
2025-06-04	smack: recognize ipv4 CIPSO w/o categories	Konstantin Andreev	1	-0/+4
2025-04-25	landlock: Add the errata interface	Mickaël Salaün	4	-4/+138
2025-04-10	smack: dont compile ipv6 code unless ipv6 is configured	Konstantin Andreev	2	-1/+15
2025-02-21	tomoyo: don't emit warning in tomoyo_write_control()	Tetsuo Handa	1	-1/+1
2025-02-21	safesetid: check size of policy writes	Leo Stone	1	-0/+3
2025-02-21	landlock: Handle weird files	Mickaël Salaün	1	-6/+5