kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
3 days	selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()	Tristan Madani	1	-9/+10
3 days	lsm: infrastructure management of the sock security	Casey Schaufler	10	-124/+145
3 days	bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized	Matt Bobrowski	1	-0/+3
12 days	selinux: fix incorrect execmem checks on overlayfs	Ondrej Mosnacek	1	-18/+24
12 days	selinux: check connect-related permissions on TCP Fast Open	Stephen Smalley	1	-1/+18
12 days	apparmor: fix label can not be immediately before a declaration	John Johansen	1	-1/+2
12 days	apparmor: put secmark label after secid lookup	Zygmunt Krynicki	1	-0/+1
12 days	apparmor: aa_getprocattr free procattr leak on format failure	Zygmunt Krynicki	1	-0/+2
12 days	apparmor: fix potential UAF in aa_replace_profiles	Maxime Bélair	1	-1/+3
12 days	apparmor: grab ns lock and refresh when looking up changehat child profiles	Ryan Lee	1	-2/+31
12 days	apparmor: fix rawdata_f_data implicit flex array	John Johansen	1	-4/+3
12 days	apparmor: aa_label_alloc use aa_label_free on alloc failure	Zygmunt Krynicki	1	-1/+1
12 days	apparmor: check label build before no_new_privs test	Ruoyu Wang	1	-10/+15
12 days	security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()	Andrew Morton	1	-0/+2
12 days	KEYS: Use acquire when reading state in keyring search	Gui-Dong Han	1	-1/+1
12 days	evm: terminate and bound the evm_xattrs read buffer	Pengpeng Hou	1	-5/+11
12 days	apparmor: advertise the tcp fast open fix is applied	John Johansen	1	-0/+1
2026-07-04	keys: Pin request_key_auth payload in instantiate paths	Shaomin Chen	3	-8/+51
2026-07-04	KEYS: fix overflow in keyctl_pkey_params_get_2()	Jarkko Sakkinen	1	-1/+8
2026-07-04	apparmor: fix use-after-free in rawdata dedup loop	Ruslan Valiyev	2	-2/+25
2026-07-04	apparmor: mediate the implicit connect of TCP fast open sendmsg	Bryam Vargas	1	-1/+15
2026-07-04	selinux: fix overlayfs mmap() and mprotect() access checks	Paul Moore	2	-64/+189
2026-07-04	lsm: add backing_file LSM hooks	Paul Moore	1	-0/+110
2026-06-19	landlock: Fix handling of disconnected directories	Mickaël Salaün	2	-11/+45
2026-06-19	ima: verify the previous kernel's IMA buffer lies in addressable RAM	Harshit Mogalapalli	1	-0/+35
2026-06-01	security/keys: fix missed RCU read section on lookup	Linus Torvalds	1	-0/+1
2026-05-23	ima: check return value of crypto_shash_final() in boot aggregate	Daniel Hodges	1	-1/+1
2026-05-17	selinux: prune /sys/fs/selinux/disable	Stephen Smalley	1	-29/+7
2026-05-17	selinux: shrink critical section in sel_write_load()	Stephen Smalley	1	-10/+8
2026-05-17	selinux: don't reserve xattr slot when we won't fill it	David Windsor	1	-1/+2
2026-03-25	xen/privcmd: add boot control for restricted usage in domU	Juergen Gross	1	-0/+1
2026-03-25	apparmor: fix race between freeing data and fs accessing it	John Johansen	7	-101/+153
2026-03-25	apparmor: fix race on rawdata dereference	John Johansen	4	-57/+93
2026-03-25	apparmor: fix differential encoding verification	John Johansen	2	-4/+20
2026-03-25	apparmor: fix unprivileged local user can do privileged policy management	John Johansen	3	-9/+43
2026-03-25	apparmor: Fix double free of ns_name in aa_replace_profiles()	John Johansen	1	-0/+1
2026-03-25	apparmor: fix missing bounds check on DEFAULT table in verify_dfa()	Massimiliano Pellizzer	1	-2/+3
2026-03-25	apparmor: fix side-effect bug in match_char() macro usage	Massimiliano Pellizzer	1	-10/+20
2026-03-25	apparmor: fix: limit the number of levels of policy namespaces	John Johansen	2	-0/+4
2026-03-25	apparmor: replace recursive profile removal with iterative approach	Massimiliano Pellizzer	1	-3/+27
2026-03-25	apparmor: fix memory leak in verify_header	Massimiliano Pellizzer	1	-1/+0
2026-03-25	apparmor: validate DFA start states are in bounds in unpack_pdb	Massimiliano Pellizzer	1	-1/+11
2026-03-04	apparmor: fix aa_label to return state from compount and component match	John Johansen	1	-6/+6
2026-03-04	apparmor: fix invalid deref of rawdata when export_binary is unset	Georgia Garcia	1	-0/+9
2026-03-04	apparmor: make label_match return a consistent value	John Johansen	1	-11/+9
2026-03-04	apparmor: remove apply_modes_to_perms from label_match	John Johansen	1	-3/+0
2026-03-04	apparmor: refcount the pdb	John Johansen	15	-210/+260
2026-03-04	apparmor: provide separate audit messages for file and policy checks	John Johansen	1	-5/+11
2026-03-04	apparmor: use passed in gfp flags in aa_alloc_null()	Dan Carpenter	1	-2/+2
2026-03-04	apparmor: fix rlimit for posix cpu timers	John Johansen	1	-0/+5