kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
32 hours	bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized	Matt Bobrowski	1	-0/+3
32 hours	selinux: fix incorrect execmem checks on overlayfs	Ondrej Mosnacek	1	-18/+24
32 hours	selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()	Tristan Madani	1	-9/+10
32 hours	selinux: check connect-related permissions on TCP Fast Open	Stephen Smalley	1	-1/+18
32 hours	apparmor: fix label can not be immediately before a declaration	John Johansen	1	-1/+2
32 hours	apparmor: put secmark label after secid lookup	Zygmunt Krynicki	1	-0/+1
32 hours	apparmor: aa_getprocattr free procattr leak on format failure	Zygmunt Krynicki	1	-0/+2
32 hours	apparmor: remove or add symlinks to rawdata according to export_binary	Georgia Garcia	3	-25/+104
32 hours	apparmor: fix potential UAF in aa_replace_profiles	Maxime Bélair	1	-1/+3
32 hours	apparmor: grab ns lock and refresh when looking up changehat child profiles	Ryan Lee	1	-2/+31
32 hours	apparmor: fix rawdata_f_data implicit flex array	John Johansen	1	-4/+3
32 hours	apparmor: aa_label_alloc use aa_label_free on alloc failure	Zygmunt Krynicki	1	-1/+1
32 hours	apparmor: check label build before no_new_privs test	Ruoyu Wang	1	-10/+15
32 hours	security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()	Andrew Morton	1	-0/+2
32 hours	KEYS: Use acquire when reading state in keyring search	Gui-Dong Han	1	-1/+1
32 hours	landlock: Fix unmarked concurrent access to socket family	Matthieu Buffet	1	-2/+9
32 hours	evm: terminate and bound the evm_xattrs read buffer	Pengpeng Hou	1	-5/+11
7 days	apparmor: advertise the tcp fast open fix is applied	John Johansen	1	-0/+1
2026-07-04	keys: Pin request_key_auth payload in instantiate paths	Shaomin Chen	3	-8/+51
2026-07-04	KEYS: fix overflow in keyctl_pkey_params_get_2()	Jarkko Sakkinen	1	-1/+8
2026-07-04	apparmor: fix use-after-free in rawdata dedup loop	Ruslan Valiyev	2	-2/+25
2026-07-04	apparmor: mediate the implicit connect of TCP fast open sendmsg	Bryam Vargas	1	-1/+15
2026-07-04	selinux: fix overlayfs mmap() and mprotect() access checks	Paul Moore	2	-64/+189
2026-07-04	lsm: add backing_file LSM hooks	Paul Moore	1	-0/+109
2026-06-19	ima: kexec: move IMA log copy from kexec load to execute	Steven Chen	1	-14/+29
2026-06-19	ima: kexec: skip IMA segment validation after kexec soft reboot	Steven Chen	1	-0/+3
2026-06-09	remove pointless includes of <linux/fdtable.h>	Al Viro	1	-1/+0
2026-06-01	security/keys: fix missed RCU read section on lookup	Linus Torvalds	1	-0/+1
2026-06-01	landlock: Fix TCP handling of short AF_UNSPEC addresses	Matthieu Buffet	1	-51/+67
2026-06-01	lsm: hold cred_guard_mutex for lsm_set_self_attr()	Stephen Smalley	1	-1/+8
2026-05-23	ima_fs: Correctly create securityfs files for unsupported hash algos	Dmitry Safonov	1	-4/+12
2026-05-23	ima_fs: get rid of lookup-by-dentry stuff	Al Viro	1	-66/+16
2026-05-23	ima_fs: don't bother with removal of files in directory we'll be removing	Al Viro	1	-39/+18
2026-05-23	ima: check return value of crypto_shash_final() in boot aggregate	Daniel Hodges	1	-1/+1
2026-05-23	fdget(), trivial conversions	Al Viro	1	-18/+8
2026-05-14	selinux: prune /sys/fs/selinux/disable	Stephen Smalley	1	-29/+7
2026-05-14	selinux: shrink critical section in sel_write_load()	Stephen Smalley	1	-10/+8
2026-05-14	selinux: don't reserve xattr slot when we won't fill it	David Windsor	1	-1/+2
2026-05-07	apparmor: use target task's context in apparmor_getprocattr()	Cengiz Can	1	-9/+7
2026-04-27	ima: do not copy measurement list to kdump kernel	Steven Chen	1	-0/+3
2026-04-27	ima: verify if the segment size has changed	Steven Chen	1	-0/+10
2026-04-02	landlock: Fix handling of disconnected directories	Mickaël Salaün	2	-12/+44
2026-04-02	landlock: Optimize file path walks and prepare for audit support	Mickaël Salaün	1	-17/+27
2026-03-25	xen/privcmd: add boot control for restricted usage in domU	Juergen Gross	1	-0/+1
2026-03-13	apparmor: fix race between freeing data and fs accessing it	John Johansen	7	-101/+153
2026-03-13	apparmor: fix race on rawdata dereference	John Johansen	4	-57/+93
2026-03-13	apparmor: fix differential encoding verification	John Johansen	2	-4/+20
2026-03-13	apparmor: fix unprivileged local user can do privileged policy management	John Johansen	3	-9/+43
2026-03-13	apparmor: Fix double free of ns_name in aa_replace_profiles()	John Johansen	1	-0/+1
2026-03-13	apparmor: fix missing bounds check on DEFAULT table in verify_dfa()	Massimiliano Pellizzer	1	-2/+3