index
:
linux.git
cached
cdir_v2
cfid-fixes
cfid-fixes-2025-09-12
cfid-fixes-rebase
cfid-fixes-v2
cfid-fixes-v3
cfid-fixes-v3-2
cifs
compress-2025-01-21
compress-2025-01-23
compress-2026-03-30
cpu_affinity
data_corruption_v6.x
fix-paths-case
hc-hw24-test
hw24
hw24-hc
hw24-hc-wip
master
multichannel-fixes
multichannel-fixes-v2
multichannel-fixes-v3
plk
sambaXP-2025
smb-compression-async
smb-compression-lsfmm
smb-compression-splice
smb-compression-upstream
xattr
Clone of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
security
Age
Commit message (
Expand
)
Author
Files
Lines
9 days
xen/privcmd: add boot control for restricted usage in domU
Juergen Gross
1
-0
/
+1
9 days
apparmor: fix race between freeing data and fs accessing it
John Johansen
7
-101
/
+153
9 days
apparmor: fix race on rawdata dereference
John Johansen
4
-57
/
+93
9 days
apparmor: fix differential encoding verification
John Johansen
2
-4
/
+20
9 days
apparmor: fix unprivileged local user can do privileged policy management
John Johansen
3
-9
/
+43
9 days
apparmor: Fix double free of ns_name in aa_replace_profiles()
John Johansen
1
-0
/
+1
9 days
apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
Massimiliano Pellizzer
1
-2
/
+3
9 days
apparmor: fix side-effect bug in match_char() macro usage
Massimiliano Pellizzer
1
-10
/
+20
9 days
apparmor: fix: limit the number of levels of policy namespaces
John Johansen
2
-0
/
+4
9 days
apparmor: replace recursive profile removal with iterative approach
Massimiliano Pellizzer
1
-3
/
+27
9 days
apparmor: fix memory leak in verify_header
Massimiliano Pellizzer
1
-1
/
+0
9 days
apparmor: validate DFA start states are in bounds in unpack_pdb
Massimiliano Pellizzer
1
-1
/
+11
2026-03-04
apparmor: fix aa_label to return state from compount and component match
John Johansen
1
-6
/
+6
2026-03-04
apparmor: fix invalid deref of rawdata when export_binary is unset
Georgia Garcia
1
-0
/
+9
2026-03-04
apparmor: make label_match return a consistent value
John Johansen
1
-11
/
+9
2026-03-04
apparmor: remove apply_modes_to_perms from label_match
John Johansen
1
-3
/
+0
2026-03-04
apparmor: refcount the pdb
John Johansen
15
-210
/
+260
2026-03-04
apparmor: provide separate audit messages for file and policy checks
John Johansen
1
-5
/
+11
2026-03-04
apparmor: use passed in gfp flags in aa_alloc_null()
Dan Carpenter
1
-2
/
+2
2026-03-04
apparmor: fix rlimit for posix cpu timers
John Johansen
1
-0
/
+5
2026-03-04
apparmor: return -ENOMEM in unpack_perms_table upon alloc failure
Ryan Lee
1
-2
/
+4
2026-03-04
apparmor: fix NULL sock in aa_sock_file_perm
John Johansen
1
-2
/
+4
2026-03-04
smack: /smack/doi: accept previously used values
Konstantin Andreev
1
-26
/
+45
2026-03-04
smack: /smack/doi must be > 0
Konstantin Andreev
1
-5
/
+7
2026-01-11
KEYS: trusted: Fix a memory leak in tpm2_load_cmd
Jarkko Sakkinen
1
-2
/
+4
2026-01-11
ima: Handle error code returned by ima_filter_rule_match()
Zhao Yipeng
1
-1
/
+1
2026-01-11
smack: fix bug: unprivileged task can create labels
Konstantin Andreev
1
-14
/
+27
2025-11-24
ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
Coiby Xu
1
-5
/
+18
2025-10-19
KEYS: trusted_tpm1: Compare HMAC values in constant time
Eric Biggers
1
-3
/
+4
2025-09-19
ima: limit the number of ToMToU integrity violations
Mimi Zohar
2
-6
/
+13
2025-08-28
apparmor: use the condition in AA_BUG_FMT even with debug disabled
Mateusz Guzik
1
-1
/
+5
2025-08-28
apparmor: shift ouid when mediating hard links in userns
Gabriel Totev
1
-2
/
+4
2025-08-28
securityfs: don't pin dentries twice, once is enough...
Al Viro
1
-2
/
+0
2025-08-15
apparmor: fix loop detection used in conflicting attachment resolution
Ryan Lee
2
-15
/
+12
2025-08-15
apparmor: ensure WB_HISTORY_SIZE value is a power of 2
Ryan Lee
2
-1
/
+3
2025-06-27
selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
Stephen Smalley
1
-1
/
+1
2025-06-04
smack: Revert "smackfs: Added check catlen"
Konstantin Andreev
1
-14
/
+3
2025-06-04
smack: recognize ipv4 CIPSO w/o categories
Konstantin Andreev
1
-0
/
+4
2025-06-04
ima: process_measurement() needlessly takes inode_lock() on MAY_READ
Frederick Lawler
1
-1
/
+3
2025-04-25
landlock: Add the errata interface
Mickaël Salaün
4
-4
/
+138
2025-04-10
smack: dont compile ipv6 code unless ipv6 is configured
Konstantin Andreev
2
-1
/
+15
2025-03-13
ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
Roberto Sassu
2
-2
/
+8
2025-02-17
tomoyo: don't emit warning in tomoyo_write_control()
Tetsuo Handa
1
-1
/
+1
2025-02-17
safesetid: check size of policy writes
Leo Stone
1
-0
/
+3
2025-02-08
landlock: Handle weird files
Mickaël Salaün
1
-6
/
+5
2025-01-09
selinux: ignore unknown extended permissions
Thiébaud Weksteen
1
-2
/
+6
2024-12-09
apparmor: test: Fix memory leak for aa_unpack_strdup()
Jinjie Ruan
1
-0
/
+6
2024-12-09
apparmor: fix 'Do simple duplicate message elimination'
chao liu
1
-0
/
+2
2024-11-22
ima: fix buffer overrun in ima_eventdigest_init_common
Samasth Norway Ananda
1
-4
/
+10
2024-11-14
security/keys: fix slab-out-of-bounds in key_task_permission
Chen Ridong
1
-2
/
+5
[next]