index
:
linux-stable.git
linux-2.6.11.y
linux-2.6.12.y
linux-2.6.13.y
linux-2.6.14.y
linux-2.6.15.y
linux-2.6.16.y
linux-2.6.17.y
linux-2.6.18.y
linux-2.6.19.y
linux-2.6.20.y
linux-2.6.21.y
linux-2.6.22.y
linux-2.6.23.y
linux-2.6.24.y
linux-2.6.25.y
linux-2.6.26.y
linux-2.6.27.y
linux-2.6.28.y
linux-2.6.29.y
linux-2.6.30.y
linux-2.6.31.y
linux-2.6.32.y
linux-2.6.33.y
linux-2.6.34.y
linux-2.6.35.y
linux-2.6.36.y
linux-2.6.37.y
linux-2.6.38.y
linux-2.6.39.y
linux-3.0.y
linux-3.1.y
linux-3.10.y
linux-3.11.y
linux-3.12.y
linux-3.13.y
linux-3.14.y
linux-3.15.y
linux-3.16.y
linux-3.17.y
linux-3.18.y
linux-3.19.y
linux-3.2.y
linux-3.3.y
linux-3.4.y
linux-3.5.y
linux-3.6.y
linux-3.7.y
linux-3.8.y
linux-3.9.y
linux-4.0.y
linux-4.1.y
linux-4.10.y
linux-4.11.y
linux-4.12.y
linux-4.13.y
linux-4.14.y
linux-4.15.y
linux-4.16.y
linux-4.17.y
linux-4.18.y
linux-4.19.y
linux-4.2.y
linux-4.20.y
linux-4.3.y
linux-4.4.y
linux-4.5.y
linux-4.6.y
linux-4.7.y
linux-4.8.y
linux-4.9.y
linux-5.0.y
linux-5.1.y
linux-5.10.y
linux-5.11.y
linux-5.12.y
linux-5.13.y
linux-5.14.y
linux-5.15.y
linux-5.16.y
linux-5.17.y
linux-5.18.y
linux-5.19.y
linux-5.2.y
linux-5.3.y
linux-5.4.y
linux-5.5.y
linux-5.6.y
linux-5.7.y
linux-5.8.y
linux-5.9.y
linux-6.0.y
linux-6.1.y
linux-6.10.y
linux-6.11.y
linux-6.12.y
linux-6.13.y
linux-6.14.y
linux-6.15.y
linux-6.16.y
linux-6.17.y
linux-6.18.y
linux-6.19.y
linux-6.2.y
linux-6.3.y
linux-6.4.y
linux-6.5.y
linux-6.6.y
linux-6.7.y
linux-6.8.y
linux-6.9.y
linux-7.0.y
linux-7.1.y
linux-rolling-lts
linux-rolling-stable
master
Linux kernel stable tree
Gitolite user
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
security
Age
Commit message (
Expand
)
Author
14 hours
landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path
Bryam Vargas
14 hours
selinux: fix incorrect execmem checks on overlayfs
Ondrej Mosnacek
14 hours
selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()
Tristan Madani
14 hours
selinux: check connect-related permissions on TCP Fast Open
Stephen Smalley
14 hours
apparmor: fix label can not be immediately before a declaration
John Johansen
14 hours
apparmor: Fix inverted comparison in cache_hold_inc()
Eduardo Vasconcelos
14 hours
apparmor: fix uninitialised pointer passed to audit_log_untrustedstring()
Maciek Borzecki
14 hours
apparmor: don't audit files pointing to aa_null.dentry
Georgia Garcia
14 hours
apparmor: put secmark label after secid lookup
Zygmunt Krynicki
14 hours
apparmor: aa_getprocattr free procattr leak on format failure
Zygmunt Krynicki
14 hours
apparmor: remove unnecessary goto and associated label
John Johansen
14 hours
apparmor: release exe file resources on path failure
Zygmunt Krynicki
14 hours
apparmor: fail policy unpack on accept2 allocation failure
Zygmunt Krynicki
14 hours
apparmor: Fix return in ns_mkdir_op
Hongling Zeng
14 hours
apparmor: remove or add symlinks to rawdata according to export_binary
Georgia Garcia
14 hours
apparmor: fix NULL pointer dereference in unpack_pdb
Georgia Garcia
14 hours
apparmor: fix potential UAF in aa_replace_profiles
Maxime Bélair
14 hours
apparmor: grab ns lock and refresh when looking up changehat child profiles
Ryan Lee
14 hours
apparmor: fix rawdata_f_data implicit flex array
John Johansen
14 hours
apparmor: aa_label_alloc use aa_label_free on alloc failure
Zygmunt Krynicki
14 hours
apparmor: check label build before no_new_privs test
Ruoyu Wang
14 hours
security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()
Andrew Morton
14 hours
apparmor: fix refcount leak when updating the sk_ctx
John Johansen
14 hours
apparmor: fix race in unix socket mediation when peer_path is used
John Johansen
14 hours
apparmor: fix shadowing of plabel that prevents cache from being updated
John Johansen
14 hours
KEYS: Use acquire when reading state in keyring search
Gui-Dong Han
14 hours
landlock: Fix unmarked concurrent access to socket family
Matthieu Buffet
14 hours
evm: terminate and bound the evm_xattrs read buffer
Pengpeng Hou
14 hours
ima: Fix sigv3 signature handling for EVM_IMA_XATTR_DIGSIG
Kamlesh Kumar
7 days
landlock: Account all audit data allocations to user space
Mickaël Salaün
7 days
landlock: Set audit_net.sk for socket access checks
Mickaël Salaün
7 days
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
Matt Bobrowski
2026-07-04
apparmor: advertise the tcp fast open fix is applied
John Johansen
2026-07-04
keys: Pin request_key_auth payload in instantiate paths
Shaomin Chen
2026-07-04
KEYS: fix overflow in keyctl_pkey_params_get_2()
Jarkko Sakkinen
2026-07-04
apparmor: fix use-after-free in rawdata dedup loop
Ruslan Valiyev
2026-07-04
apparmor: mediate the implicit connect of TCP fast open sendmsg
Bryam Vargas
2026-05-28
security/keys: fix missed RCU read section on lookup
Linus Torvalds
2026-05-19
Merge tag 'lsm-pr-20260519' of git://git.kernel.org/pub/scm/linux/kernel/git/...
Linus Torvalds
2026-05-14
lsm: hold cred_guard_mutex for lsm_set_self_attr()
Stephen Smalley
2026-05-05
selinux: shrink critical section in sel_write_load()
Stephen Smalley
2026-05-05
selinux: allow multiple opens of /sys/fs/selinux/policy
Stephen Smalley
2026-05-05
selinux: prune /sys/fs/selinux/user
Stephen Smalley
2026-05-05
selinux: prune /sys/fs/selinux/disable
Stephen Smalley
2026-05-05
selinux: prune /sys/fs/selinux/checkreqprot
Stephen Smalley
2026-04-28
selinux: fix avdcache auditing
Stephen Smalley
2026-04-27
selinux: don't reserve xattr slot when we won't fill it
David Windsor
2026-04-27
selinux: use sk blob accessor in socket permission helpers
Zongyao Chen
2026-04-24
Merge tag 'apparmor-pr-2026-04-23' of git://git.kernel.org/pub/scm/linux/kern...
Linus Torvalds
2026-04-22
apparmor/lsm: Fix aa_dfa_unpack's error handling in aa_setup_dfa_engine
GONG Ruiqi
[next]
