index
:
kernel/git/stable/linux-stable.git
linux-2.6.11.y
linux-2.6.12.y
linux-2.6.13.y
linux-2.6.14.y
linux-2.6.15.y
linux-2.6.16.y
linux-2.6.17.y
linux-2.6.18.y
linux-2.6.19.y
linux-2.6.20.y
linux-2.6.21.y
linux-2.6.22.y
linux-2.6.23.y
linux-2.6.24.y
linux-2.6.25.y
linux-2.6.26.y
linux-2.6.27.y
linux-2.6.28.y
linux-2.6.29.y
linux-2.6.30.y
linux-2.6.31.y
linux-2.6.32.y
linux-2.6.33.y
linux-2.6.34.y
linux-2.6.35.y
linux-2.6.36.y
linux-2.6.37.y
linux-2.6.38.y
linux-2.6.39.y
linux-3.0.y
linux-3.1.y
linux-3.10.y
linux-3.11.y
linux-3.12.y
linux-3.13.y
linux-3.14.y
linux-3.15.y
linux-3.16.y
linux-3.17.y
linux-3.18.y
linux-3.19.y
linux-3.2.y
linux-3.3.y
linux-3.4.y
linux-3.5.y
linux-3.6.y
linux-3.7.y
linux-3.8.y
linux-3.9.y
linux-4.0.y
linux-4.1.y
linux-4.10.y
linux-4.11.y
linux-4.12.y
linux-4.13.y
linux-4.14.y
linux-4.15.y
linux-4.16.y
linux-4.17.y
linux-4.18.y
linux-4.19.y
linux-4.2.y
linux-4.20.y
linux-4.3.y
linux-4.4.y
linux-4.5.y
linux-4.6.y
linux-4.7.y
linux-4.8.y
linux-4.9.y
linux-5.0.y
linux-5.1.y
linux-5.10.y
linux-5.11.y
linux-5.12.y
linux-5.13.y
linux-5.14.y
linux-5.15.y
linux-5.16.y
linux-5.17.y
linux-5.18.y
linux-5.19.y
linux-5.2.y
linux-5.3.y
linux-5.4.y
linux-5.5.y
linux-5.6.y
linux-5.7.y
linux-5.8.y
linux-5.9.y
linux-6.0.y
linux-6.1.y
linux-6.10.y
linux-6.11.y
linux-6.12.y
linux-6.13.y
linux-6.14.y
linux-6.15.y
linux-6.16.y
linux-6.17.y
linux-6.18.y
linux-6.19.y
linux-6.2.y
linux-6.3.y
linux-6.4.y
linux-6.5.y
linux-6.6.y
linux-6.7.y
linux-6.8.y
linux-6.9.y
linux-7.0.y
linux-7.1.y
linux-7.2.y
linux-rolling-lts
linux-rolling-stable
master
Linux kernel stable tree
Stable Group
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
security
Age
Commit message (
Expand
)
Author
4 days
selinux: switch two allocations to use kzalloc_objs()
Stephen Smalley
4 days
selinux: require a class's permission values to cover its permission count
Bryam Vargas
4 days
selinux: reject a permission value exceeding the class permission count
Bryam Vargas
4 days
selinux: more strict policy parsing
Christian Göttsche
4 days
selinux: use u16 for security classes
Christian Göttsche
4 days
selinux: make more use of str_read() when loading the policy
Christian Göttsche
4 days
selinux: avoid unnecessary indirection in struct level_datum
Christian Göttsche
4 days
selinux: use known type instead of void pointer
Christian Göttsche
2026-08-23
fsnotify, lsm: Decouple fsnotify from lsm
Song Liu
2026-08-23
selinux: reject an unclaimed class value in security_get_classes()
Bryam Vargas
2026-08-23
selinux: do not cancel a policy conversion that never started
Bryam Vargas
2026-08-23
selinux: reject a class permission count below its inherited common
Bryam Vargas
2026-08-23
selinux: require every boolean value to be defined
Bryam Vargas
2026-08-19
ima: Instantiate file_truncate and path_truncate hooks
Mimi Zohar
2026-08-19
ima: fix out-of-bounds read in xattr_verify()
Lincoln Wallace
2026-08-09
keys: make keyring key-chunk byte order agree with keyring_diff_objects()
Michael Bommarito
2026-08-09
keys: fix out-of-bounds read in keyring_get_key_chunk()
Michael Bommarito
2026-08-09
KEYS: trusted: dcp: fix key_len validation and calc_blob_len() return type
Fabrice Derepas
2026-08-03
landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path
Bryam Vargas
2026-08-03
landlock: Prepare to use credential instead of domain for fowner
Mickaël Salaün
2026-07-24
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
Matt Bobrowski
2026-07-24
selinux: fix incorrect execmem checks on overlayfs
Ondrej Mosnacek
2026-07-24
selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()
Tristan Madani
2026-07-24
selinux: check connect-related permissions on TCP Fast Open
Stephen Smalley
2026-07-24
apparmor: fix label can not be immediately before a declaration
John Johansen
2026-07-24
apparmor: put secmark label after secid lookup
Zygmunt Krynicki
2026-07-24
apparmor: aa_getprocattr free procattr leak on format failure
Zygmunt Krynicki
2026-07-24
apparmor: remove or add symlinks to rawdata according to export_binary
Georgia Garcia
2026-07-24
apparmor: fix potential UAF in aa_replace_profiles
Maxime Bélair
2026-07-24
apparmor: grab ns lock and refresh when looking up changehat child profiles
Ryan Lee
2026-07-24
apparmor: fix rawdata_f_data implicit flex array
John Johansen
2026-07-24
apparmor: aa_label_alloc use aa_label_free on alloc failure
Zygmunt Krynicki
2026-07-24
apparmor: check label build before no_new_privs test
Ruoyu Wang
2026-07-24
security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()
Andrew Morton
2026-07-24
KEYS: Use acquire when reading state in keyring search
Gui-Dong Han
2026-07-24
landlock: Fix unmarked concurrent access to socket family
Matthieu Buffet
2026-07-24
evm: terminate and bound the evm_xattrs read buffer
Pengpeng Hou
2026-07-18
apparmor: advertise the tcp fast open fix is applied
John Johansen
2026-07-04
keys: Pin request_key_auth payload in instantiate paths
Shaomin Chen
2026-07-04
KEYS: fix overflow in keyctl_pkey_params_get_2()
Jarkko Sakkinen
2026-07-04
apparmor: fix use-after-free in rawdata dedup loop
Ruslan Valiyev
2026-07-04
apparmor: mediate the implicit connect of TCP fast open sendmsg
Bryam Vargas
2026-07-04
selinux: fix overlayfs mmap() and mprotect() access checks
Paul Moore
2026-07-04
lsm: add backing_file LSM hooks
Paul Moore
2026-06-19
ima: kexec: move IMA log copy from kexec load to execute
Steven Chen
2026-06-19
ima: kexec: skip IMA segment validation after kexec soft reboot
Steven Chen
2026-06-09
remove pointless includes of <linux/fdtable.h>
Al Viro
2026-06-01
security/keys: fix missed RCU read section on lookup
Linus Torvalds
2026-06-01
landlock: Fix TCP handling of short AF_UNSPEC addresses
Matthieu Buffet
2026-06-01
lsm: hold cred_guard_mutex for lsm_set_self_attr()
Stephen Smalley
[next]
