kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
13 days	apparmor: fix race between freeing data and fs accessing it	John Johansen	7	-101/+153
13 days	apparmor: fix race on rawdata dereference	John Johansen	4	-57/+93
13 days	apparmor: fix differential encoding verification	John Johansen	2	-4/+20
13 days	apparmor: fix unprivileged local user can do privileged policy management	John Johansen	3	-9/+43
13 days	apparmor: Fix double free of ns_name in aa_replace_profiles()	John Johansen	1	-0/+1
13 days	apparmor: fix missing bounds check on DEFAULT table in verify_dfa()	Massimiliano Pellizzer	1	-2/+3
13 days	apparmor: fix side-effect bug in match_char() macro usage	Massimiliano Pellizzer	1	-10/+20
13 days	apparmor: fix: limit the number of levels of policy namespaces	John Johansen	2	-0/+4
13 days	apparmor: replace recursive profile removal with iterative approach	Massimiliano Pellizzer	1	-3/+27
13 days	apparmor: fix memory leak in verify_header	Massimiliano Pellizzer	1	-1/+0
13 days	apparmor: validate DFA start states are in bounds in unpack_pdb	Massimiliano Pellizzer	1	-1/+11
2026-03-04	ima: verify the previous kernel's IMA buffer lies in addressable RAM	Harshit Mogalapalli	1	-0/+35
2026-02-27	apparmor: fix aa_label to return state from compount and component match	John Johansen	1	-6/+6
2026-02-27	apparmor: fix invalid deref of rawdata when export_binary is unset	Georgia Garcia	1	-0/+9
2026-02-27	apparmor: avoid per-cpu hold underflow in aa_get_buffer	Zhengmian Hu	1	-1/+2
2026-02-27	apparmor: make label_match return a consistent value	John Johansen	1	-11/+9
2026-02-27	apparmor: remove apply_modes_to_perms from label_match	John Johansen	1	-3/+0
2026-02-27	apparmor: fix rlimit for posix cpu timers	John Johansen	1	-0/+5
2026-02-27	apparmor: move check for aa_null file to cover all cases	John Johansen	2	-6/+10
2026-02-27	apparmor: account for in_atomic removal in common_file_perm	Ryan Lee	1	-3/+2
2026-02-27	apparmor: drop in_atomic flag in common_mmap, and common_file_perm	John Johansen	1	-12/+9
2026-02-27	apparmor: fix boolean argument in apparmor_mmap_file	Ryan Lee	1	-1/+1
2026-02-27	apparmor: return -ENOMEM in unpack_perms_table upon alloc failure	Ryan Lee	1	-2/+4
2026-02-27	apparmor: Fix & Optimize table creation from possibly unaligned memory	Helge Deller	2	-9/+10
2026-02-27	AppArmor: Allow apparmor to handle unaligned dfa tables	Helge Deller	1	-7/+8
2026-02-27	apparmor: fix NULL sock in aa_sock_file_perm	John Johansen	1	-2/+4
2026-02-27	apparmor: fix NULL pointer dereference in __unix_needs_revalidation	System Administrator	1	-0/+3
2026-02-27	evm: Use ordered xattrs list to calculate HMAC in evm_init_hmac()	Roberto Sassu	1	-4/+10
2026-02-27	smack: /smack/doi: accept previously used values	Konstantin Andreev	1	-26/+45
2026-02-27	smack: /smack/doi must be > 0	Konstantin Andreev	1	-5/+7
2026-01-30	keys/trusted_keys: fix handle passed to tpm_buf_append_name during unseal	Srish Srinivasan	1	-2/+2
2026-01-23	landlock: Fix wrong type usage	Tingmao Wang	1	-1/+1
2026-01-23	landlock: Fix TCP handling of short AF_UNSPEC addresses	Matthieu Buffet	1	-51/+67
2026-01-08	kernel/kexec: change the prototype of kimage_map_segment()	Pingfan Liu	1	-3/+1
2026-01-02	tpm2-sessions: Fix out of range indexing in name_size	Jarkko Sakkinen	1	-6/+23
2026-01-02	KEYS: trusted: Fix a memory leak in tpm2_load_cmd	Jarkko Sakkinen	1	-2/+4
2025-12-18	landlock: Fix handling of disconnected directories	Mickaël Salaün	2	-12/+44
2025-12-18	ima: Handle error code returned by ima_filter_rule_match()	Zhao Yipeng	1	-1/+1
2025-12-18	ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hook	Roberto Sassu	1	-9/+33
2025-12-18	smack: fix bug: setting task label silently ignores input garbage	Konstantin Andreev	3	-63/+148
2025-12-18	smack: fix bug: unprivileged task can create labels	Konstantin Andreev	1	-14/+27
2025-12-18	smack: fix bug: invalid label of unix socket file	Konstantin Andreev	1	-14/+44
2025-12-18	smack: always "instantiate" inode in smack_inode_init_security()	Konstantin Andreev	1	-3/+7
2025-12-18	smack: deduplicate xattr setting in smack_inode_init_security()	Konstantin Andreev	1	-27/+29
2025-12-18	smack: deduplicate "does access rule request transmutation"	Konstantin Andreev	1	-25/+32
2025-12-18	smack: fix bug: SMACK64TRANSMUTE set on non-directory	Konstantin Andreev	1	-12/+14
2025-11-22	Merge tag 'selinux-pr-20251121' of git://git.kernel.org/pub/scm/linux/kernel/...	Linus Torvalds	2	-129/+144
2025-11-21	selinux: rename the cred_security_struct variables to "crsec"	Paul Moore	2	-117/+117
2025-11-21	selinux: move avdcache to per-task security struct	Stephen Smalley	2	-15/+30
2025-11-21	selinux: rename task_security_struct to cred_security_struct	Stephen Smalley	2	-38/+38