index
:
linux-stable.git
linux-2.6.11.y
linux-2.6.12.y
linux-2.6.13.y
linux-2.6.14.y
linux-2.6.15.y
linux-2.6.16.y
linux-2.6.17.y
linux-2.6.18.y
linux-2.6.19.y
linux-2.6.20.y
linux-2.6.21.y
linux-2.6.22.y
linux-2.6.23.y
linux-2.6.24.y
linux-2.6.25.y
linux-2.6.26.y
linux-2.6.27.y
linux-2.6.28.y
linux-2.6.29.y
linux-2.6.30.y
linux-2.6.31.y
linux-2.6.32.y
linux-2.6.33.y
linux-2.6.34.y
linux-2.6.35.y
linux-2.6.36.y
linux-2.6.37.y
linux-2.6.38.y
linux-2.6.39.y
linux-3.0.y
linux-3.1.y
linux-3.10.y
linux-3.11.y
linux-3.12.y
linux-3.13.y
linux-3.14.y
linux-3.15.y
linux-3.16.y
linux-3.17.y
linux-3.18.y
linux-3.19.y
linux-3.2.y
linux-3.3.y
linux-3.4.y
linux-3.5.y
linux-3.6.y
linux-3.7.y
linux-3.8.y
linux-3.9.y
linux-4.0.y
linux-4.1.y
linux-4.10.y
linux-4.11.y
linux-4.12.y
linux-4.13.y
linux-4.14.y
linux-4.15.y
linux-4.16.y
linux-4.17.y
linux-4.18.y
linux-4.19.y
linux-4.2.y
linux-4.20.y
linux-4.3.y
linux-4.4.y
linux-4.5.y
linux-4.6.y
linux-4.7.y
linux-4.8.y
linux-4.9.y
linux-5.0.y
linux-5.1.y
linux-5.10.y
linux-5.11.y
linux-5.12.y
linux-5.13.y
linux-5.14.y
linux-5.15.y
linux-5.16.y
linux-5.17.y
linux-5.18.y
linux-5.19.y
linux-5.2.y
linux-5.3.y
linux-5.4.y
linux-5.5.y
linux-5.6.y
linux-5.7.y
linux-5.8.y
linux-5.9.y
linux-6.0.y
linux-6.1.y
linux-6.10.y
linux-6.11.y
linux-6.12.y
linux-6.13.y
linux-6.14.y
linux-6.15.y
linux-6.16.y
linux-6.17.y
linux-6.18.y
linux-6.19.y
linux-6.2.y
linux-6.3.y
linux-6.4.y
linux-6.5.y
linux-6.6.y
linux-6.7.y
linux-6.8.y
linux-6.9.y
linux-7.0.y
linux-7.1.y
linux-7.2.y
linux-rolling-lts
linux-rolling-stable
master
Linux kernel stable tree
Gitolite user
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
security
Age
Commit message (
Expand
)
Author
9 days
selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()
Tristan Madani
9 days
lsm: infrastructure management of the sock security
Casey Schaufler
9 days
lsm: use default hook return value in call_int_hook()
Ondrej Mosnacek
9 days
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
Matt Bobrowski
9 days
selinux: do not cancel a policy conversion that never started
Bryam Vargas
9 days
selinux: reject a class permission count below its inherited common
Bryam Vargas
9 days
selinux: require every boolean value to be defined
Bryam Vargas
12 days
ima: fix out-of-bounds read in xattr_verify()
Lincoln Wallace
12 days
keys: make keyring key-chunk byte order agree with keyring_diff_objects()
Michael Bommarito
12 days
keys: fix out-of-bounds read in keyring_get_key_chunk()
Michael Bommarito
2026-07-24
apparmor: fix label can not be immediately before a declaration
John Johansen
2026-07-24
apparmor: put secmark label after secid lookup
Zygmunt Krynicki
2026-07-24
apparmor: aa_getprocattr free procattr leak on format failure
Zygmunt Krynicki
2026-07-24
apparmor: fix potential UAF in aa_replace_profiles
Maxime Bélair
2026-07-24
apparmor: grab ns lock and refresh when looking up changehat child profiles
Ryan Lee
2026-07-24
apparmor: aa_label_alloc use aa_label_free on alloc failure
Zygmunt Krynicki
2026-07-24
apparmor: check label build before no_new_privs test
Ruoyu Wang
2026-07-24
KEYS: Use acquire when reading state in keyring search
Gui-Dong Han
2026-07-24
evm: terminate and bound the evm_xattrs read buffer
Pengpeng Hou
2026-07-24
apparmor: mediate the implicit connect of TCP fast open sendmsg
Bryam Vargas
2026-07-24
apparmor: fix use-after-free in rawdata dedup loop
Ruslan Valiyev
2026-07-04
keys: Pin request_key_auth payload in instantiate paths
Shaomin Chen
2026-07-04
KEYS: fix overflow in keyctl_pkey_params_get_2()
Jarkko Sakkinen
2026-06-19
apparmor: validate default DFA states are in bounds
Ben Hutchings
2026-06-19
selinux: enable genfscon labeling for securityfs
Christian Göttsche
2026-06-19
use less confusing names for iov_iter direction initializers
Al Viro
2026-06-01
ima: check return value of crypto_shash_final() in boot aggregate
Daniel Hodges
2026-04-18
apparmor: fix race between freeing data and fs accessing it
John Johansen
2026-04-18
apparmor: fix race on rawdata dereference
John Johansen
2026-04-18
apparmor: fix differential encoding verification
John Johansen
2026-04-18
apparmor: fix unprivileged local user can do privileged policy management
John Johansen
2026-04-18
apparmor: Fix double free of ns_name in aa_replace_profiles()
John Johansen
2026-04-18
apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
Massimiliano Pellizzer
2026-04-18
apparmor: fix side-effect bug in match_char() macro usage
Massimiliano Pellizzer
2026-04-18
apparmor: fix: limit the number of levels of policy namespaces
John Johansen
2026-04-18
apparmor: replace recursive profile removal with iterative approach
Massimiliano Pellizzer
2026-04-18
apparmor: fix memory leak in verify_header
Massimiliano Pellizzer
2026-04-18
apparmor: validate DFA start states are in bounds in unpack_pdb
Massimiliano Pellizzer
2026-04-18
xen/privcmd: add boot control for restricted usage in domU
Juergen Gross
2026-03-04
apparmor: fix invalid deref of rawdata when export_binary is unset
Georgia Garcia
2026-03-04
apparmor: fix rlimit for posix cpu timers
John Johansen
2026-03-04
apparmor: fix NULL sock in aa_sock_file_perm
John Johansen
2026-03-04
smack: /smack/doi: accept previously used values
Konstantin Andreev
2026-03-04
smack: /smack/doi must be > 0
Konstantin Andreev
2026-01-19
KEYS: trusted: Fix a memory leak in tpm2_load_cmd
Jarkko Sakkinen
2026-01-19
ima: Handle error code returned by ima_filter_rule_match()
Zhao Yipeng
2026-01-19
smack: fix bug: unprivileged task can create labels
Konstantin Andreev
2025-10-19
KEYS: trusted_tpm1: Compare HMAC values in constant time
Eric Biggers
2025-08-28
securityfs: don't pin dentries twice, once is enough...
Al Viro
2025-08-28
apparmor: ensure WB_HISTORY_SIZE value is a power of 2
Ryan Lee
[next]
