summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
27 hourskeys: make keyring key-chunk byte order agree with keyring_diff_objects()Michael Bommarito
27 hourskeys: fix out-of-bounds read in keyring_get_key_chunk()Michael Bommarito
27 hoursKEYS: trusted: dcp: fix key_len validation and calc_blob_len() return typeFabrice Derepas
8 dayslandlock: Account all audit data allocations to user spaceMickaël Salaün
8 dayslandlock: Fix formattingMickaël Salaün
2026-07-24bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitializedMatt Bobrowski
2026-07-24landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO pathBryam Vargas
2026-07-24selinux: fix incorrect execmem checks on overlayfsOndrej Mosnacek
2026-07-24selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()Tristan Madani
2026-07-24selinux: check connect-related permissions on TCP Fast OpenStephen Smalley
2026-07-24apparmor: fix label can not be immediately before a declarationJohn Johansen
2026-07-24apparmor: fix uninitialised pointer passed to audit_log_untrustedstring()Maciek Borzecki
2026-07-24apparmor: don't audit files pointing to aa_null.dentryGeorgia Garcia
2026-07-24apparmor: put secmark label after secid lookupZygmunt Krynicki
2026-07-24apparmor: aa_getprocattr free procattr leak on format failureZygmunt Krynicki
2026-07-24apparmor: fail policy unpack on accept2 allocation failureZygmunt Krynicki
2026-07-24apparmor: Fix return in ns_mkdir_opHongling Zeng
2026-07-24apparmor: remove or add symlinks to rawdata according to export_binaryGeorgia Garcia
2026-07-24apparmor: fix NULL pointer dereference in unpack_pdbGeorgia Garcia
2026-07-24apparmor: fix potential UAF in aa_replace_profilesMaxime Bélair
2026-07-24apparmor: grab ns lock and refresh when looking up changehat child profilesRyan Lee
2026-07-24apparmor: fix rawdata_f_data implicit flex arrayJohn Johansen
2026-07-24apparmor: aa_label_alloc use aa_label_free on alloc failureZygmunt Krynicki
2026-07-24apparmor: check label build before no_new_privs testRuoyu Wang
2026-07-24security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()Andrew Morton
2026-07-24apparmor: fix refcount leak when updating the sk_ctxJohn Johansen
2026-07-24apparmor: fix race in unix socket mediation when peer_path is usedJohn Johansen
2026-07-24apparmor: fix shadowing of plabel that prevents cache from being updatedJohn Johansen
2026-07-24KEYS: Use acquire when reading state in keyring searchGui-Dong Han
2026-07-24landlock: Fix unmarked concurrent access to socket familyMatthieu Buffet
2026-07-24evm: terminate and bound the evm_xattrs read bufferPengpeng Hou
2026-07-18landlock: Set audit_net.sk for socket access checksMickaël Salaün
2026-07-04apparmor: advertise the tcp fast open fix is appliedJohn Johansen
2026-07-04keys: Pin request_key_auth payload in instantiate pathsShaomin Chen
2026-07-04KEYS: fix overflow in keyctl_pkey_params_get_2()Jarkko Sakkinen
2026-07-04apparmor: fix use-after-free in rawdata dedup loopRuslan Valiyev
2026-07-04apparmor: mediate the implicit connect of TCP fast open sendmsgBryam Vargas
2026-07-04selinux: fix overlayfs mmap() and mprotect() access checksPaul Moore
2026-07-04lsm: add backing_file LSM hooksPaul Moore
2026-06-01security/keys: fix missed RCU read section on lookupLinus Torvalds
2026-06-01lsm: hold cred_guard_mutex for lsm_set_self_attr()Stephen Smalley
2026-05-23ima_fs: Correctly create securityfs files for unsupported hash algosDmitry Safonov
2026-05-23ima: check return value of crypto_shash_final() in boot aggregateDaniel Hodges
2026-05-14selinux: prune /sys/fs/selinux/userStephen Smalley
2026-05-14selinux: prune /sys/fs/selinux/disableStephen Smalley
2026-05-14selinux: prune /sys/fs/selinux/checkreqprotStephen Smalley
2026-05-14selinux: shrink critical section in sel_write_load()Stephen Smalley
2026-05-14selinux: don't reserve xattr slot when we won't fill itDavid Windsor
2026-05-14selinux: use sk blob accessor in socket permission helpersZongyao Chen
2026-05-14selinux: fix avdcache auditingStephen Smalley