index
:
linux-stable.git
linux-2.6.11.y
linux-2.6.12.y
linux-2.6.13.y
linux-2.6.14.y
linux-2.6.15.y
linux-2.6.16.y
linux-2.6.17.y
linux-2.6.18.y
linux-2.6.19.y
linux-2.6.20.y
linux-2.6.21.y
linux-2.6.22.y
linux-2.6.23.y
linux-2.6.24.y
linux-2.6.25.y
linux-2.6.26.y
linux-2.6.27.y
linux-2.6.28.y
linux-2.6.29.y
linux-2.6.30.y
linux-2.6.31.y
linux-2.6.32.y
linux-2.6.33.y
linux-2.6.34.y
linux-2.6.35.y
linux-2.6.36.y
linux-2.6.37.y
linux-2.6.38.y
linux-2.6.39.y
linux-3.0.y
linux-3.1.y
linux-3.10.y
linux-3.11.y
linux-3.12.y
linux-3.13.y
linux-3.14.y
linux-3.15.y
linux-3.16.y
linux-3.17.y
linux-3.18.y
linux-3.19.y
linux-3.2.y
linux-3.3.y
linux-3.4.y
linux-3.5.y
linux-3.6.y
linux-3.7.y
linux-3.8.y
linux-3.9.y
linux-4.0.y
linux-4.1.y
linux-4.10.y
linux-4.11.y
linux-4.12.y
linux-4.13.y
linux-4.14.y
linux-4.15.y
linux-4.16.y
linux-4.17.y
linux-4.18.y
linux-4.19.y
linux-4.2.y
linux-4.20.y
linux-4.3.y
linux-4.4.y
linux-4.5.y
linux-4.6.y
linux-4.7.y
linux-4.8.y
linux-4.9.y
linux-5.0.y
linux-5.1.y
linux-5.10.y
linux-5.11.y
linux-5.12.y
linux-5.13.y
linux-5.14.y
linux-5.15.y
linux-5.16.y
linux-5.17.y
linux-5.18.y
linux-5.19.y
linux-5.2.y
linux-5.3.y
linux-5.4.y
linux-5.5.y
linux-5.6.y
linux-5.7.y
linux-5.8.y
linux-5.9.y
linux-6.0.y
linux-6.1.y
linux-6.10.y
linux-6.11.y
linux-6.12.y
linux-6.13.y
linux-6.14.y
linux-6.15.y
linux-6.16.y
linux-6.17.y
linux-6.18.y
linux-6.19.y
linux-6.2.y
linux-6.3.y
linux-6.4.y
linux-6.5.y
linux-6.6.y
linux-6.7.y
linux-6.8.y
linux-6.9.y
linux-7.0.y
linux-7.1.y
linux-rolling-lts
linux-rolling-stable
master
Linux kernel stable tree
Gitolite user
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
security
Age
Commit message (
Expand
)
Author
31 hours
apparmor: fix label can not be immediately before a declaration
John Johansen
31 hours
apparmor: put secmark label after secid lookup
Zygmunt Krynicki
31 hours
apparmor: aa_getprocattr free procattr leak on format failure
Zygmunt Krynicki
31 hours
apparmor: fix potential UAF in aa_replace_profiles
Maxime Bélair
31 hours
apparmor: grab ns lock and refresh when looking up changehat child profiles
Ryan Lee
31 hours
apparmor: aa_label_alloc use aa_label_free on alloc failure
Zygmunt Krynicki
31 hours
apparmor: check label build before no_new_privs test
Ruoyu Wang
31 hours
KEYS: Use acquire when reading state in keyring search
Gui-Dong Han
31 hours
apparmor: mediate the implicit connect of TCP fast open sendmsg
Bryam Vargas
31 hours
apparmor: fix use-after-free in rawdata dedup loop
Ruslan Valiyev
2026-07-04
keys: Pin request_key_auth payload in instantiate paths
Shaomin Chen
2026-07-04
KEYS: fix overflow in keyctl_pkey_params_get_2()
Jarkko Sakkinen
2026-06-19
apparmor: validate default DFA states are in bounds
Ben Hutchings
2026-06-19
use less confusing names for iov_iter direction initializers
Al Viro
2026-06-01
ima: check return value of crypto_shash_final() in boot aggregate
Daniel Hodges
2026-04-18
apparmor: fix race between freeing data and fs accessing it
John Johansen
2026-04-18
apparmor: fix race on rawdata dereference
John Johansen
2026-04-18
apparmor: fix differential encoding verification
John Johansen
2026-04-18
apparmor: fix unprivileged local user can do privileged policy management
John Johansen
2026-04-18
apparmor: Fix double free of ns_name in aa_replace_profiles()
John Johansen
2026-04-18
apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
Massimiliano Pellizzer
2026-04-18
apparmor: fix side-effect bug in match_char() macro usage
Massimiliano Pellizzer
2026-04-18
apparmor: fix: limit the number of levels of policy namespaces
John Johansen
2026-04-18
apparmor: replace recursive profile removal with iterative approach
Massimiliano Pellizzer
2026-04-18
apparmor: fix memory leak in verify_header
Massimiliano Pellizzer
2026-04-18
apparmor: validate DFA start states are in bounds in unpack_pdb
Massimiliano Pellizzer
2026-04-18
xen/privcmd: add boot control for restricted usage in domU
Juergen Gross
2026-03-04
apparmor: fix invalid deref of rawdata when export_binary is unset
Georgia Garcia
2026-03-04
apparmor: fix rlimit for posix cpu timers
John Johansen
2026-03-04
apparmor: fix NULL sock in aa_sock_file_perm
John Johansen
2026-03-04
smack: /smack/doi: accept previously used values
Konstantin Andreev
2026-03-04
smack: /smack/doi must be > 0
Konstantin Andreev
2026-01-19
ima: Handle error code returned by ima_filter_rule_match()
Zhao Yipeng
2026-01-19
smack: fix bug: unprivileged task can create labels
Konstantin Andreev
2025-10-29
KEYS: trusted_tpm1: Compare HMAC values in constant time
Eric Biggers
2025-08-28
securityfs: don't pin dentries twice, once is enough...
Al Viro
2025-08-28
apparmor: ensure WB_HISTORY_SIZE value is a power of 2
Ryan Lee
2025-06-27
selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
Stephen Smalley
2025-06-04
smack: recognize ipv4 CIPSO w/o categories
Konstantin Andreev
2025-03-13
ima: Fix use-after-free on a dentry's dname.name
Stefan Berger
2025-03-13
tomoyo: don't emit warning in tomoyo_write_control()
Tetsuo Handa
2025-03-13
safesetid: check size of policy writes
Leo Stone
2025-01-09
selinux: ignore unknown extended permissions
Thiébaud Weksteen
2024-12-14
apparmor: test: Fix memory leak for aa_unpack_strdup()
Jinjie Ruan
2024-12-14
apparmor: fix 'Do simple duplicate message elimination'
chao liu
2024-11-17
security/keys: fix slab-out-of-bounds in key_task_permission
Chen Ridong
2024-11-08
selinux: improve error checking in sel_write_load()
Paul Moore
2024-10-17
tomoyo: fallback to realpath if symlink's pathname does not exist
Tetsuo Handa
2024-10-17
proc: add config & param to block forcing mem writes
Adrian Ratiu
2024-10-17
selinux,smack: don't bypass permissions check in inode_setsecctx hook
Scott Mayhew
[next]
