| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-06-26 11:53 UTC | rust: add `Ownable` trait and `Owned` type | 19 | a.hindborg@kernel.org | skipped |
| 2026-06-26 11:45 UTC | Introduce capable_noaudit | 1 | cem@kernel.org | skipped |
| 2026-06-25 10:15 UTC | rust: add `Ownable` trait and `Owned` type | 18 | a.hindborg@kernel.org | skipped |
| 2026-06-24 14:02 UTC | Verify BPF signed loader at load time | 2 | daniel@iogearbox.net | finished in 4h17m0s |
| 2026-06-19 13:03 UTC | bpf: lsm: disable xfrm_decode_session hook attachment | 1 | include@grrlz.net | finished in 4h19m0s |
| 2026-06-19 00:22 UTC | tomoyo: Enforce connect policy in TCP Fast Open | 1 | matthieu@buffet.re | finished in 4h12m0s |
| 2026-06-18 20:34 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 3 | dwindsor@gmail.com | finished in 4h10m0s |
| 2026-06-11 18:59 UTC | Add LoadPin support for eBPF program loading | 1 | devnull@kernel.org | finished in 2h17m0s |
| 2026-06-11 16:21 UTC | landlock: Add UDP access control support | 5 | matthieu@buffet.re | finished in 4h6m0s |
| 2026-06-10 23:03 UTC | Verify BPF signed loader at load time | 1 | daniel@iogearbox.net | finished in 4h35m0s |
| 2026-06-04 20:11 UTC | rust: add `Ownable` trait and `Owned` type | 17 | a.hindborg@kernel.org | finished in 1h45m0s |
| 2026-06-01 03:06 UTC | fork: Ensure copy_process() returns a valid error pointer on failure | 1 | hushijia1@uniontech.com | finished in 4h29m0s |
| 2026-05-28 18:26 UTC | lsm: Replace security_sb_mount with granular mount hooks | 5 | song@kernel.org | finished in 4h47m0s |
| 2026-05-28 01:59 UTC | netlabel: validate unlabeled mask attribute length | 2 | zhaochenguang@kylinos.cn | finished in 4h48m0s |
| 2026-05-27 18:11 UTC | Landlock: Namespace and capability control | 2 | mic@digikod.net | finished in 4h30m0s |
| 2026-05-26 14:28 UTC | security: Expand task_setscheduler LSM hook to include CPU affinity mask | 3 | atomlin@atomlin.com | finished in 4h26m0s |
| 2026-05-24 04:14 UTC | net: trust-after-modification fixes for IPv4 options + netlabel | 2 | tpluszz77@gmail.com | finished in 3h55m0s |
| 2026-05-23 16:00 UTC | lsm,bpf: fix security_bpf_prog_load() error handling | 1 | paul@paul-moore.com | finished in 4h0m0s |
| 2026-05-22 21:53 UTC | gen_loader fixes | 3 | kpsingh@kernel.org | finished in 4h19m0s |
| 2026-05-22 02:32 UTC | Signed BPF + IPE Policies | 1 | kpsingh@kernel.org | skipped |
| 2026-05-21 15:22 UTC | gen_loader fixes | 2 | kpsingh@kernel.org | finished in 4h19m0s |
| 2026-05-20 08:18 UTC | security: replace __get_free_pages() call with kmalloc() | 1 | rppt@kernel.org | finished in 4h21m0s |
| 2026-05-20 02:40 UTC | bpf: reject NULL data/sig in bpf_verify_pkcs7_signature | 2 | kpsingh@kernel.org | finished in 4h39m0s |
| 2026-05-19 21:53 UTC | bpf, libbpf: reject non-exclusive metadata maps in the signed loader | 1 | kpsingh@kernel.org | finished in 4h53m0s |
| 2026-05-19 20:09 UTC | bpf: reject NULL data/sig in bpf_verify_pkcs7_signature | 1 | kpsingh@kernel.org | finished in 4h26m0s |
| 2026-05-15 20:01 UTC | lsm: Replace security_sb_mount with granular mount hooks | 4 | song@kernel.org | finished in 4h45m0s |
| 2026-05-13 18:03 UTC | landlock: Account all audit data allocations to user space | 1 | mic@digikod.net | finished in 4h55m0s |
| 2026-05-12 09:10 UTC | memcg: dma-buf per-cgroup accounting via pid_fd | 1 | aesteve@redhat.com | finished in 4h15m0s |
| 2026-05-09 21:38 UTC | security, sched: Expand task_setscheduler LSM hook and related fixes | 2 | atomlin@atomlin.com | finished in 4h15m0s |
| 2026-05-09 16:48 UTC | security, sched: Expand task_setscheduler LSM hook and related fixes | 1 | atomlin@atomlin.com | finished in 4h14m0s |
| 2026-05-09 01:52 UTC | lsm: Replace security_sb_mount with granular mount hooks | 3 | song@kernel.org | finished in 4h14m0s |
| 2026-05-07 19:13 UTC | Reintroduce Hornet LSM | 7 | bboscaccy@linux.microsoft.com | finished in 4h31m0s |
| 2026-05-05 09:05 UTC | module: Introduce hash-based integrity checking | 5 | linux@weissschuh.net | finished in 4h6m0s |
| 2026-05-03 21:18 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 2 | dwindsor@gmail.com | finished in 4h3m0s |
| 2026-05-02 12:43 UTC | landlock: Add UDP access control support | 4 | matthieu@buffet.re | finished in 3h54m0s |
| 2026-04-30 00:03 UTC | lsm: Replace security_sb_mount with granular mount hooks | 2 | song@kernel.org | finished in 4h50m0s |
| 2026-04-27 00:15 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 1 | dwindsor@gmail.com | finished in 4h3m0s |
| 2026-04-20 21:26 UTC | Reintroduce Hornet LSM | 5 | bboscaccy@linux.microsoft.com | finished in 4h16m0s |
| 2026-04-16 17:33 UTC | Reintroduce Hornet LSM | 4 | bboscaccy@linux.microsoft.com | finished in 4h8m0s |
| 2026-04-07 20:01 UTC | BPF interface for applying Landlock rulesets | 1 | utilityemal77@gmail.com | finished in 4h33m0s |
| 2026-04-06 14:36 UTC | Landlock tracepoints | 2 | mic@digikod.net | skipped |
| 2026-04-03 03:08 UTC | Fix incorrect overlayfs mmap() and mprotect() LSM access controls | 4 | paul@paul-moore.com | finished in 4h8m0s |
| 2026-03-27 22:04 UTC | Fix incorrect overlayfs mmap() and mprotect() LSM access controls | 3 | paul@paul-moore.com | finished in 4h12m0s |
| 2026-03-26 06:06 UTC | Reintrodce Hornet LSM | 3 | bboscaccy@linux.microsoft.com | finished in 4h14m0s |
| 2026-03-23 04:24 UTC | Fix incorrect overlayfs mmap() and mprotect() LSM access controls | 2 | paul@paul-moore.com | finished in 4h0m0s |
| 2026-03-20 13:53 UTC | backing_file: store an internal O_PATH user_path_file | 7 | amir73il@gmail.com | finished in 4h10m0s |
| 2026-03-20 12:29 UTC | fs: allow backing file code to open an O_PATH file with negative dentry | 2 | amir73il@gmail.com | finished in 4h27m0s |
| 2026-03-19 12:46 UTC | fs: allow vfs code to open an O_PATH file with negative dentry | 1 | amir73il@gmail.com | finished in 4h11m0s |
| 2026-03-18 18:43 UTC | lsm: Replace security_sb_mount with granular mount hooks | 1 | song@kernel.org | finished in 4h28m0s |
| 2026-03-18 13:12 UTC | backing_file: store user_path_file | 6 | amir73il@gmail.com | finished in 4h9m0s |
| 2026-03-16 21:35 UTC | Fix incorrect overlayfs mmap() and mprotect() LSM access controls | 1 | paul@paul-moore.com | finished in 24m0s |
| 2026-03-16 19:02 UTC | vfs: follow-on fixes for i_ino widening | 3 | jlayton@kernel.org | finished in 4h4m0s |
| 2026-03-13 18:45 UTC | vfs: follow-on fixes for i_ino widening | 2 | jlayton@kernel.org | finished in 3h55m0s |
| 2026-03-12 10:04 UTC | Landlock: Namespace and capability control | 1 | mic@digikod.net | finished in 3h57m0s |
| 2026-03-11 21:31 UTC | audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs | 1 | fred@cloudflare.com | finished in 2h3m0s |
| 2026-03-11 05:19 UTC | udp: Retire UDP-Lite. | 3 | kuniyu@google.com | finished in 4h24m0s |
| 2026-03-10 14:56 UTC | kthread, exit: clean up kernel thread exit paths | 2 | brauner@kernel.org | finished in 3h59m0s |
| 2026-03-10 11:48 UTC | treewide: Use IS_ERR_OR_NULL over manual NULL check - refactor | 1 | phahn-oss@avm.de | finished in 4h4m0s |
| 2026-03-08 20:57 UTC | FIXUP: cachefiles: change cachefiles_bury_object to use start_renaming_dentry() | 1 | neilb@ownmail.net | skipped |
| 2026-03-05 21:49 UTC | udp: Retire UDP-Lite. | 2 | kuniyu@google.com | finished in 4h6m0s |
| 2026-03-05 09:31 UTC | module: Move 'struct module_signature' to UAPI | 3 | thomas.weissschuh@linutronix.de | finished in 58m0s |
| 2026-03-05 07:11 UTC | module: Move 'struct module_signature' to UAPI | 2 | thomas.weissschuh@linutronix.de | finished in 57m0s |
| 2026-03-04 19:28 UTC | udp: Retire UDP-Lite. | 1 | kuniyu@google.com | finished in 4h13m0s |
| 2026-03-02 12:42 UTC | modules: Move 'struct module_signature' to UAPI | 1 | thomas.weissschuh@linutronix.de | finished in 1h30m0s |
| 2026-02-27 23:38 UTC | Reintrodce Hornet LSM | 2 | bboscaccy@linux.microsoft.com | finished in 4h12m0s |
| 2026-02-24 22:16 UTC | Further centralising of directory locking for name ops. | 3 | neilb@ownmail.net | finished in 1h14m0s |
| 2026-02-24 11:17 UTC | rust: add `Ownable` trait and `Owned` type | 16 | a.hindborg@kernel.org | finished in 1h11m0s |
| 2026-02-23 01:06 UTC | Further centralising of directory locking for name ops. | 2 | neilb@ownmail.net | finished in 3h50m0s |
| 2026-02-20 09:51 UTC | rust: add `Ownable` trait and `Owned` type | 15 | a.hindborg@kernel.org | finished in 1h3m0s |
| 2026-02-19 20:04 UTC | lsm: Add LSM hook security_unix_find | 6 | utilityemal77@gmail.com | finished in 4h4m0s |
| 2026-02-16 15:06 UTC | fanotify: avid some premature LSM checks | 1 | omosnace@redhat.com | finished in 1h53m0s |
| 2026-02-06 18:02 UTC | fs/pidfs: Add permission check to pidfd_info() | 1 | danieldurning.work@gmail.com | finished in 4h0m0s |
| 2026-02-05 10:51 UTC | Make Rust Binder build as a module | 1 | aliceryhl@google.com | finished in 3h57m0s |
| 2026-02-04 11:56 UTC | rust: add `Ownable` trait and `Owned` type | 14 | a.hindborg@kernel.org | finished in 1h2m0s |
| 2026-02-04 04:57 UTC | Further centralising of directory locking for name ops. | 1 | neilb@ownmail.net | skipped |
| 2026-01-30 00:14 UTC | ipe: document AT_EXECVE_CHECK TOCTOU issue on OverlayFS | 1 | wufan@kernel.org | finished in 57m0s |
| 2026-01-29 22:51 UTC | lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY | 1 | paul@paul-moore.com | finished in 3h54m0s |
| 2026-01-23 10:08 UTC | xfrm: kill xfrm_dev_{state,policy}_flush_secctx_check() | 1 | penguin-kernel@i-love.sakura.ne.jp | finished in 3h50m0s |
| 2026-01-20 15:57 UTC | cipso: harden use of skb_cow() in cipso_v4_skbuff_setattr() | 1 | whrosenb@asu.edu | finished in 4h2m0s |
| 2026-01-20 14:10 UTC | net: uapi: Provide an UAPI definition of 'struct sockaddr' | 2 | thomas.weissschuh@linutronix.de | finished in 1h5m0s |
| 2025-12-31 21:33 UTC | lsm: Add hook unix_path_connect | 1 | utilityemal77@gmail.com |
finished
in 3h54m0s
[3 findings] |
| 2025-12-19 17:36 UTC | ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() | 1 | whrosenb@asu.edu | finished in 4h13m0s |
| 2025-12-19 15:39 UTC | Compiler-Based Context- and Locking-Analysis | 5 | elver@google.com | finished in 3h51m0s |
| 2025-12-19 08:15 UTC | exec: Fix dead-lock in de_thread with ptrace_attach | 19 | bernd.edlinger@hotmail.de | finished in 3h56m0s |
| 2025-12-12 16:36 UTC | landlock: Add UDP access control support | 3 | matthieu@buffet.re | skipped |
| 2025-12-06 08:38 UTC | net: ipv6: fix spelling typos in comments | 2 | i.shihao.999@gmail.com | skipped |
| 2025-12-04 12:59 UTC | bpf, arm64: Do not audit capability check in do_jit() | 1 | omosnace@redhat.com | finished in 48m0s |
| 2025-11-30 22:06 UTC | fuse: fix conversion of fuse_reverse_inval_entry() to start_removing() | 1 | neilb@ownmail.net | finished in 3h50m0s |
| 2025-11-28 17:21 UTC | Landlock: Disconnected directory handling | 5 | mic@digikod.net | finished in 3h52m0s |
| 2025-11-27 10:31 UTC | net: ipv6: fix spelling typos in comments | 1 | i.shihao.999@gmail.com | skipped |
| 2025-11-27 00:50 UTC | Introduce bpf_kern_path and bpf_path_put | 1 | song@kernel.org | finished in 3h54m0s |
| 2025-11-26 19:11 UTC | Landlock: Disconnected directory handling | 4 | mic@digikod.net | finished in 4h1m0s |
| 2025-11-18 18:13 UTC | exec: Fix dead-lock in de_thread with ptrace_attach | 18 | bernd.edlinger@hotmail.de | finished in 42m0s |
| 2025-11-18 13:46 UTC | Support socket access-control | 4 | ivanov.mikhail1@huawei-partners.com | finished in 4h18m0s |
| 2025-11-17 10:07 UTC | New trait OwnableRefCounted for ARef<->Owned conversion. | 13 | oliver.mangold@pm.me | finished in 1h16m0s |
| 2025-11-13 00:18 UTC | Create and use APIs to centralise locking for directory ops. | 6 | neilb@ownmail.net | finished in 3h56m0s |
| 2025-11-11 21:29 UTC | nsproxy: fix free_nsproxy() and simplify create_new_namespaces() | 1 | brauner@kernel.org | skipped |
| 2025-11-09 17:14 UTC | mt-exec: fix deadlock with ptrace_attach() | 1 | oleg@redhat.com | finished in 3h42m0s |
| 2025-11-06 00:50 UTC | Create and use APIs to centralise locking for directory ops. | 5 | neilb@ownmail.net |
finished
in 3h59m0s
[2 findings] |
| 2025-10-29 23:31 UTC | Create and use APIs to centralise locking for directory ops. | 4 | neilb@ownmail.net | finished in 3m0s |