index
:
linux-stable.git
linux-2.6.11.y
linux-2.6.12.y
linux-2.6.13.y
linux-2.6.14.y
linux-2.6.15.y
linux-2.6.16.y
linux-2.6.17.y
linux-2.6.18.y
linux-2.6.19.y
linux-2.6.20.y
linux-2.6.21.y
linux-2.6.22.y
linux-2.6.23.y
linux-2.6.24.y
linux-2.6.25.y
linux-2.6.26.y
linux-2.6.27.y
linux-2.6.28.y
linux-2.6.29.y
linux-2.6.30.y
linux-2.6.31.y
linux-2.6.32.y
linux-2.6.33.y
linux-2.6.34.y
linux-2.6.35.y
linux-2.6.36.y
linux-2.6.37.y
linux-2.6.38.y
linux-2.6.39.y
linux-3.0.y
linux-3.1.y
linux-3.10.y
linux-3.11.y
linux-3.12.y
linux-3.13.y
linux-3.14.y
linux-3.15.y
linux-3.16.y
linux-3.17.y
linux-3.18.y
linux-3.19.y
linux-3.2.y
linux-3.3.y
linux-3.4.y
linux-3.5.y
linux-3.6.y
linux-3.7.y
linux-3.8.y
linux-3.9.y
linux-4.0.y
linux-4.1.y
linux-4.10.y
linux-4.11.y
linux-4.12.y
linux-4.13.y
linux-4.14.y
linux-4.15.y
linux-4.16.y
linux-4.17.y
linux-4.18.y
linux-4.19.y
linux-4.2.y
linux-4.20.y
linux-4.3.y
linux-4.4.y
linux-4.5.y
linux-4.6.y
linux-4.7.y
linux-4.8.y
linux-4.9.y
linux-5.0.y
linux-5.1.y
linux-5.10.y
linux-5.11.y
linux-5.12.y
linux-5.13.y
linux-5.14.y
linux-5.15.y
linux-5.16.y
linux-5.17.y
linux-5.18.y
linux-5.19.y
linux-5.2.y
linux-5.3.y
linux-5.4.y
linux-5.5.y
linux-5.6.y
linux-5.7.y
linux-5.8.y
linux-5.9.y
linux-6.0.y
linux-6.1.y
linux-6.10.y
linux-6.11.y
linux-6.12.y
linux-6.13.y
linux-6.14.y
linux-6.15.y
linux-6.16.y
linux-6.17.y
linux-6.18.y
linux-6.19.y
linux-6.2.y
linux-6.3.y
linux-6.4.y
linux-6.5.y
linux-6.6.y
linux-6.7.y
linux-6.8.y
linux-6.9.y
linux-7.0.y
linux-7.1.y
linux-rolling-lts
linux-rolling-stable
master
Linux kernel stable tree
Gitolite user
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
security
Age
Commit message (
Expand
)
Author
23 hours
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
Matt Bobrowski
23 hours
landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path
Bryam Vargas
23 hours
selinux: fix incorrect execmem checks on overlayfs
Ondrej Mosnacek
23 hours
selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()
Tristan Madani
23 hours
selinux: check connect-related permissions on TCP Fast Open
Stephen Smalley
23 hours
apparmor: fix label can not be immediately before a declaration
John Johansen
23 hours
apparmor: fix uninitialised pointer passed to audit_log_untrustedstring()
Maciek Borzecki
23 hours
apparmor: don't audit files pointing to aa_null.dentry
Georgia Garcia
23 hours
apparmor: put secmark label after secid lookup
Zygmunt Krynicki
23 hours
apparmor: aa_getprocattr free procattr leak on format failure
Zygmunt Krynicki
23 hours
apparmor: fail policy unpack on accept2 allocation failure
Zygmunt Krynicki
23 hours
apparmor: Fix return in ns_mkdir_op
Hongling Zeng
23 hours
apparmor: remove or add symlinks to rawdata according to export_binary
Georgia Garcia
23 hours
apparmor: fix NULL pointer dereference in unpack_pdb
Georgia Garcia
23 hours
apparmor: fix potential UAF in aa_replace_profiles
Maxime Bélair
23 hours
apparmor: grab ns lock and refresh when looking up changehat child profiles
Ryan Lee
23 hours
apparmor: fix rawdata_f_data implicit flex array
John Johansen
23 hours
apparmor: aa_label_alloc use aa_label_free on alloc failure
Zygmunt Krynicki
23 hours
apparmor: check label build before no_new_privs test
Ruoyu Wang
23 hours
security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()
Andrew Morton
23 hours
apparmor: fix refcount leak when updating the sk_ctx
John Johansen
23 hours
apparmor: fix race in unix socket mediation when peer_path is used
John Johansen
23 hours
apparmor: fix shadowing of plabel that prevents cache from being updated
John Johansen
23 hours
KEYS: Use acquire when reading state in keyring search
Gui-Dong Han
23 hours
landlock: Fix unmarked concurrent access to socket family
Matthieu Buffet
23 hours
evm: terminate and bound the evm_xattrs read buffer
Pengpeng Hou
7 days
landlock: Set audit_net.sk for socket access checks
Mickaël Salaün
2026-07-04
apparmor: advertise the tcp fast open fix is applied
John Johansen
2026-07-04
keys: Pin request_key_auth payload in instantiate paths
Shaomin Chen
2026-07-04
KEYS: fix overflow in keyctl_pkey_params_get_2()
Jarkko Sakkinen
2026-07-04
apparmor: fix use-after-free in rawdata dedup loop
Ruslan Valiyev
2026-07-04
apparmor: mediate the implicit connect of TCP fast open sendmsg
Bryam Vargas
2026-07-04
selinux: fix overlayfs mmap() and mprotect() access checks
Paul Moore
2026-07-04
lsm: add backing_file LSM hooks
Paul Moore
2026-06-01
security/keys: fix missed RCU read section on lookup
Linus Torvalds
2026-06-01
lsm: hold cred_guard_mutex for lsm_set_self_attr()
Stephen Smalley
2026-05-23
ima_fs: Correctly create securityfs files for unsupported hash algos
Dmitry Safonov
2026-05-23
ima: check return value of crypto_shash_final() in boot aggregate
Daniel Hodges
2026-05-14
selinux: prune /sys/fs/selinux/user
Stephen Smalley
2026-05-14
selinux: prune /sys/fs/selinux/disable
Stephen Smalley
2026-05-14
selinux: prune /sys/fs/selinux/checkreqprot
Stephen Smalley
2026-05-14
selinux: shrink critical section in sel_write_load()
Stephen Smalley
2026-05-14
selinux: don't reserve xattr slot when we won't fill it
David Windsor
2026-05-14
selinux: use sk blob accessor in socket permission helpers
Zongyao Chen
2026-05-14
selinux: fix avdcache auditing
Stephen Smalley
2026-05-07
apparmor: use target task's context in apparmor_getprocattr()
Cengiz Can
2026-05-07
landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()
Mickaël Salaün
2026-03-25
xen/privcmd: add boot control for restricted usage in domU
Juergen Gross
2026-03-13
apparmor: fix race between freeing data and fs accessing it
John Johansen
2026-03-13
apparmor: fix race on rawdata dereference
John Johansen
[next]
