index
:
linux-stable.git
linux-2.6.11.y
linux-2.6.12.y
linux-2.6.13.y
linux-2.6.14.y
linux-2.6.15.y
linux-2.6.16.y
linux-2.6.17.y
linux-2.6.18.y
linux-2.6.19.y
linux-2.6.20.y
linux-2.6.21.y
linux-2.6.22.y
linux-2.6.23.y
linux-2.6.24.y
linux-2.6.25.y
linux-2.6.26.y
linux-2.6.27.y
linux-2.6.28.y
linux-2.6.29.y
linux-2.6.30.y
linux-2.6.31.y
linux-2.6.32.y
linux-2.6.33.y
linux-2.6.34.y
linux-2.6.35.y
linux-2.6.36.y
linux-2.6.37.y
linux-2.6.38.y
linux-2.6.39.y
linux-3.0.y
linux-3.1.y
linux-3.10.y
linux-3.11.y
linux-3.12.y
linux-3.13.y
linux-3.14.y
linux-3.15.y
linux-3.16.y
linux-3.17.y
linux-3.18.y
linux-3.19.y
linux-3.2.y
linux-3.3.y
linux-3.4.y
linux-3.5.y
linux-3.6.y
linux-3.7.y
linux-3.8.y
linux-3.9.y
linux-4.0.y
linux-4.1.y
linux-4.10.y
linux-4.11.y
linux-4.12.y
linux-4.13.y
linux-4.14.y
linux-4.15.y
linux-4.16.y
linux-4.17.y
linux-4.18.y
linux-4.19.y
linux-4.2.y
linux-4.20.y
linux-4.3.y
linux-4.4.y
linux-4.5.y
linux-4.6.y
linux-4.7.y
linux-4.8.y
linux-4.9.y
linux-5.0.y
linux-5.1.y
linux-5.10.y
linux-5.11.y
linux-5.12.y
linux-5.13.y
linux-5.14.y
linux-5.15.y
linux-5.16.y
linux-5.17.y
linux-5.18.y
linux-5.19.y
linux-5.2.y
linux-5.3.y
linux-5.4.y
linux-5.5.y
linux-5.6.y
linux-5.7.y
linux-5.8.y
linux-5.9.y
linux-6.0.y
linux-6.1.y
linux-6.10.y
linux-6.11.y
linux-6.12.y
linux-6.13.y
linux-6.14.y
linux-6.15.y
linux-6.16.y
linux-6.17.y
linux-6.18.y
linux-6.19.y
linux-6.2.y
linux-6.3.y
linux-6.4.y
linux-6.5.y
linux-6.6.y
linux-6.7.y
linux-6.8.y
linux-6.9.y
linux-7.0.y
linux-7.1.y
linux-rolling-lts
linux-rolling-stable
master
Linux kernel stable tree
Gitolite user
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
security
Age
Commit message (
Expand
)
Author
11 hours
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
Matt Bobrowski
11 hours
selinux: fix incorrect execmem checks on overlayfs
Ondrej Mosnacek
11 hours
selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()
Tristan Madani
11 hours
selinux: check connect-related permissions on TCP Fast Open
Stephen Smalley
11 hours
apparmor: fix label can not be immediately before a declaration
John Johansen
11 hours
apparmor: put secmark label after secid lookup
Zygmunt Krynicki
11 hours
apparmor: aa_getprocattr free procattr leak on format failure
Zygmunt Krynicki
11 hours
apparmor: remove or add symlinks to rawdata according to export_binary
Georgia Garcia
11 hours
apparmor: fix potential UAF in aa_replace_profiles
Maxime Bélair
11 hours
apparmor: grab ns lock and refresh when looking up changehat child profiles
Ryan Lee
11 hours
apparmor: fix rawdata_f_data implicit flex array
John Johansen
11 hours
apparmor: aa_label_alloc use aa_label_free on alloc failure
Zygmunt Krynicki
11 hours
apparmor: check label build before no_new_privs test
Ruoyu Wang
11 hours
security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()
Andrew Morton
11 hours
KEYS: Use acquire when reading state in keyring search
Gui-Dong Han
11 hours
landlock: Fix unmarked concurrent access to socket family
Matthieu Buffet
11 hours
evm: terminate and bound the evm_xattrs read buffer
Pengpeng Hou
6 days
apparmor: advertise the tcp fast open fix is applied
John Johansen
2026-07-04
keys: Pin request_key_auth payload in instantiate paths
Shaomin Chen
2026-07-04
KEYS: fix overflow in keyctl_pkey_params_get_2()
Jarkko Sakkinen
2026-07-04
apparmor: fix use-after-free in rawdata dedup loop
Ruslan Valiyev
2026-07-04
apparmor: mediate the implicit connect of TCP fast open sendmsg
Bryam Vargas
2026-07-04
selinux: fix overlayfs mmap() and mprotect() access checks
Paul Moore
2026-07-04
lsm: add backing_file LSM hooks
Paul Moore
2026-06-19
ima: kexec: move IMA log copy from kexec load to execute
Steven Chen
2026-06-19
ima: kexec: skip IMA segment validation after kexec soft reboot
Steven Chen
2026-06-09
remove pointless includes of <linux/fdtable.h>
Al Viro
2026-06-01
security/keys: fix missed RCU read section on lookup
Linus Torvalds
2026-06-01
landlock: Fix TCP handling of short AF_UNSPEC addresses
Matthieu Buffet
2026-06-01
lsm: hold cred_guard_mutex for lsm_set_self_attr()
Stephen Smalley
2026-05-23
ima_fs: Correctly create securityfs files for unsupported hash algos
Dmitry Safonov
2026-05-23
ima_fs: get rid of lookup-by-dentry stuff
Al Viro
2026-05-23
ima_fs: don't bother with removal of files in directory we'll be removing
Al Viro
2026-05-23
ima: check return value of crypto_shash_final() in boot aggregate
Daniel Hodges
2026-05-23
fdget(), trivial conversions
Al Viro
2026-05-14
selinux: prune /sys/fs/selinux/disable
Stephen Smalley
2026-05-14
selinux: shrink critical section in sel_write_load()
Stephen Smalley
2026-05-14
selinux: don't reserve xattr slot when we won't fill it
David Windsor
2026-05-07
apparmor: use target task's context in apparmor_getprocattr()
Cengiz Can
2026-04-27
ima: do not copy measurement list to kdump kernel
Steven Chen
2026-04-27
ima: verify if the segment size has changed
Steven Chen
2026-04-02
landlock: Fix handling of disconnected directories
Mickaël Salaün
2026-04-02
landlock: Optimize file path walks and prepare for audit support
Mickaël Salaün
2026-03-25
xen/privcmd: add boot control for restricted usage in domU
Juergen Gross
2026-03-13
apparmor: fix race between freeing data and fs accessing it
John Johansen
2026-03-13
apparmor: fix race on rawdata dereference
John Johansen
2026-03-13
apparmor: fix differential encoding verification
John Johansen
2026-03-13
apparmor: fix unprivileged local user can do privileged policy management
John Johansen
2026-03-13
apparmor: Fix double free of ns_name in aa_replace_profiles()
John Johansen
2026-03-13
apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
Massimiliano Pellizzer
[next]
