kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
34 hours	bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized	Matt Bobrowski	1	-0/+3
34 hours	landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path	Bryam Vargas	3	-0/+35
34 hours	selinux: fix incorrect execmem checks on overlayfs	Ondrej Mosnacek	1	-18/+24
34 hours	selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()	Tristan Madani	1	-9/+10
34 hours	selinux: check connect-related permissions on TCP Fast Open	Stephen Smalley	1	-1/+18
34 hours	apparmor: fix label can not be immediately before a declaration	John Johansen	1	-1/+2
34 hours	apparmor: fix uninitialised pointer passed to audit_log_untrustedstring()	Maciek Borzecki	1	-5/+5
34 hours	apparmor: don't audit files pointing to aa_null.dentry	Georgia Garcia	1	-1/+1
34 hours	apparmor: put secmark label after secid lookup	Zygmunt Krynicki	1	-0/+1
34 hours	apparmor: aa_getprocattr free procattr leak on format failure	Zygmunt Krynicki	1	-0/+2
34 hours	apparmor: fail policy unpack on accept2 allocation failure	Zygmunt Krynicki	1	-2/+2
34 hours	apparmor: Fix return in ns_mkdir_op	Hongling Zeng	1	-1/+1
34 hours	apparmor: remove or add symlinks to rawdata according to export_binary	Georgia Garcia	3	-25/+104
34 hours	apparmor: fix NULL pointer dereference in unpack_pdb	Georgia Garcia	1	-1/+1
34 hours	apparmor: fix potential UAF in aa_replace_profiles	Maxime Bélair	1	-1/+3
34 hours	apparmor: grab ns lock and refresh when looking up changehat child profiles	Ryan Lee	1	-2/+31
34 hours	apparmor: fix rawdata_f_data implicit flex array	John Johansen	1	-4/+3
34 hours	apparmor: aa_label_alloc use aa_label_free on alloc failure	Zygmunt Krynicki	1	-1/+1
34 hours	apparmor: check label build before no_new_privs test	Ruoyu Wang	1	-10/+15
34 hours	security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()	Andrew Morton	1	-0/+2
34 hours	apparmor: fix refcount leak when updating the sk_ctx	John Johansen	1	-2/+4
34 hours	apparmor: fix race in unix socket mediation when peer_path is used	John Johansen	1	-29/+35
34 hours	apparmor: fix shadowing of plabel that prevents cache from being updated	John Johansen	1	-2/+1
34 hours	KEYS: Use acquire when reading state in keyring search	Gui-Dong Han	1	-1/+1
34 hours	landlock: Fix unmarked concurrent access to socket family	Matthieu Buffet	1	-2/+9
34 hours	evm: terminate and bound the evm_xattrs read buffer	Pengpeng Hou	1	-5/+11
7 days	landlock: Set audit_net.sk for socket access checks	Mickaël Salaün	1	-0/+1
2026-07-04	apparmor: advertise the tcp fast open fix is applied	John Johansen	1	-0/+2
2026-07-04	keys: Pin request_key_auth payload in instantiate paths	Shaomin Chen	3	-8/+51
2026-07-04	KEYS: fix overflow in keyctl_pkey_params_get_2()	Jarkko Sakkinen	1	-1/+8
2026-07-04	apparmor: fix use-after-free in rawdata dedup loop	Ruslan Valiyev	2	-2/+25
2026-07-04	apparmor: mediate the implicit connect of TCP fast open sendmsg	Bryam Vargas	1	-1/+15
2026-07-04	selinux: fix overlayfs mmap() and mprotect() access checks	Paul Moore	2	-64/+189
2026-07-04	lsm: add backing_file LSM hooks	Paul Moore	1	-0/+109
2026-06-01	security/keys: fix missed RCU read section on lookup	Linus Torvalds	1	-0/+1
2026-06-01	lsm: hold cred_guard_mutex for lsm_set_self_attr()	Stephen Smalley	1	-1/+8
2026-05-23	ima_fs: Correctly create securityfs files for unsupported hash algos	Dmitry Safonov	1	-4/+12
2026-05-23	ima: check return value of crypto_shash_final() in boot aggregate	Daniel Hodges	1	-1/+1
2026-05-14	selinux: prune /sys/fs/selinux/user	Stephen Smalley	3	-190/+5
2026-05-14	selinux: prune /sys/fs/selinux/disable	Stephen Smalley	1	-29/+7
2026-05-14	selinux: prune /sys/fs/selinux/checkreqprot	Stephen Smalley	1	-40/+7
2026-05-14	selinux: shrink critical section in sel_write_load()	Stephen Smalley	1	-10/+8
2026-05-14	selinux: don't reserve xattr slot when we won't fill it	David Windsor	1	-1/+2
2026-05-14	selinux: use sk blob accessor in socket permission helpers	Zongyao Chen	1	-2/+2
2026-05-14	selinux: fix avdcache auditing	Stephen Smalley	2	-21/+14
2026-05-07	apparmor: use target task's context in apparmor_getprocattr()	Cengiz Can	1	-9/+7
2026-05-07	landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()	Mickaël Salaün	1	-4/+2
2026-03-25	xen/privcmd: add boot control for restricted usage in domU	Juergen Gross	1	-0/+1
2026-03-13	apparmor: fix race between freeing data and fs accessing it	John Johansen	7	-101/+153
2026-03-13	apparmor: fix race on rawdata dereference	John Johansen	4	-57/+93