| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-07-16 14:31 UTC | pidfd: add a minimal process spawn builder | 1 | me@linux.beauty | skipped |
| 2026-07-08 15:44 UTC | Bring includes in linux/kmod.h up to date | 1 | petr.pavlu@suse.com | skipped |
| 2026-07-08 07:53 UTC | Verify BPF signed loader at load time | 6 | daniel@iogearbox.net | finished in 4h47m0s |
| 2026-07-08 00:09 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 5 | dwindsor@gmail.com | finished in 5h21m0s |
| 2026-07-07 19:30 UTC | Verify BPF signed loader at load time | 5 | daniel@iogearbox.net | finished in 5h0m0s |
| 2026-07-06 23:50 UTC | lsm: Replace security_sb_mount with granular mount hooks | 6 | song@kernel.org | finished in 4h35m0s |
| 2026-07-06 13:56 UTC | Verify BPF signed loader at load time | 4 | daniel@iogearbox.net | finished in 4h43m0s |
| 2026-07-03 07:39 UTC | coredump, net: fix layer violation with direct connection | 1 | john.ericson@obsidian.systems | finished in 4h39m0s |
| 2026-07-02 14:36 UTC | Verify BPF signed loader at load time | 3 | daniel@iogearbox.net | finished in 4h52m0s |
| 2026-07-02 09:33 UTC | Fix quota evasion on xfs and add capable_noaudit | 3 | cem@kernel.org | finished in 3h48m0s |
| 2026-06-30 18:39 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 4 | dwindsor@gmail.com | finished in 5h14m0s |
| 2026-06-28 10:07 UTC | rust: aref: make `AlwaysRefCounted::inc_ref` an associated function | 7 | trev@trevrosa.dev | skipped |
| 2026-06-28 09:51 UTC | rust: aref: make `AlwaysRefCounted::inc_ref` an associated function | 6 | trev@trevrosa.dev | skipped |
| 2026-06-28 09:28 UTC | rust: aref: make `AlwaysRefCounted::inc_ref` an associated function | 5 | trev@trevrosa.dev | skipped |
| 2026-06-26 11:53 UTC | rust: add `Ownable` trait and `Owned` type | 19 | a.hindborg@kernel.org | skipped |
| 2026-06-26 11:45 UTC | Introduce capable_noaudit | 1 | cem@kernel.org | skipped |
| 2026-06-25 10:15 UTC | rust: add `Ownable` trait and `Owned` type | 18 | a.hindborg@kernel.org | skipped |
| 2026-06-24 14:02 UTC | Verify BPF signed loader at load time | 2 | daniel@iogearbox.net | finished in 4h17m0s |
| 2026-06-19 13:03 UTC | bpf: lsm: disable xfrm_decode_session hook attachment | 1 | include@grrlz.net | finished in 4h19m0s |
| 2026-06-19 00:22 UTC | tomoyo: Enforce connect policy in TCP Fast Open | 1 | matthieu@buffet.re | finished in 4h12m0s |
| 2026-06-18 20:34 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 3 | dwindsor@gmail.com | finished in 4h10m0s |
| 2026-06-11 18:59 UTC | Add LoadPin support for eBPF program loading | 1 | devnull@kernel.org | finished in 2h17m0s |
| 2026-06-11 16:21 UTC | landlock: Add UDP access control support | 5 | matthieu@buffet.re | finished in 4h6m0s |
| 2026-06-10 23:03 UTC | Verify BPF signed loader at load time | 1 | daniel@iogearbox.net | finished in 4h35m0s |
| 2026-06-04 20:11 UTC | rust: add `Ownable` trait and `Owned` type | 17 | a.hindborg@kernel.org | finished in 1h45m0s |
| 2026-06-01 03:06 UTC | fork: Ensure copy_process() returns a valid error pointer on failure | 1 | hushijia1@uniontech.com | finished in 4h29m0s |
| 2026-05-28 18:26 UTC | lsm: Replace security_sb_mount with granular mount hooks | 5 | song@kernel.org | finished in 4h47m0s |
| 2026-05-28 01:59 UTC | netlabel: validate unlabeled mask attribute length | 2 | zhaochenguang@kylinos.cn | finished in 4h48m0s |
| 2026-05-27 18:11 UTC | Landlock: Namespace and capability control | 2 | mic@digikod.net | finished in 4h30m0s |
| 2026-05-26 14:28 UTC | security: Expand task_setscheduler LSM hook to include CPU affinity mask | 3 | atomlin@atomlin.com | finished in 4h26m0s |
| 2026-05-24 04:14 UTC | net: trust-after-modification fixes for IPv4 options + netlabel | 2 | tpluszz77@gmail.com | finished in 3h55m0s |
| 2026-05-23 16:00 UTC | lsm,bpf: fix security_bpf_prog_load() error handling | 1 | paul@paul-moore.com | finished in 4h0m0s |
| 2026-05-22 21:53 UTC | gen_loader fixes | 3 | kpsingh@kernel.org | finished in 4h19m0s |
| 2026-05-22 02:32 UTC | Signed BPF + IPE Policies | 1 | kpsingh@kernel.org | skipped |
| 2026-05-21 15:22 UTC | gen_loader fixes | 2 | kpsingh@kernel.org | finished in 4h19m0s |
| 2026-05-20 08:18 UTC | security: replace __get_free_pages() call with kmalloc() | 1 | rppt@kernel.org | finished in 4h21m0s |
| 2026-05-20 02:40 UTC | bpf: reject NULL data/sig in bpf_verify_pkcs7_signature | 2 | kpsingh@kernel.org | finished in 4h39m0s |
| 2026-05-19 21:53 UTC | bpf, libbpf: reject non-exclusive metadata maps in the signed loader | 1 | kpsingh@kernel.org | finished in 4h53m0s |
| 2026-05-19 20:09 UTC | bpf: reject NULL data/sig in bpf_verify_pkcs7_signature | 1 | kpsingh@kernel.org | finished in 4h26m0s |
| 2026-05-15 20:01 UTC | lsm: Replace security_sb_mount with granular mount hooks | 4 | song@kernel.org | finished in 4h45m0s |
| 2026-05-13 18:03 UTC | landlock: Account all audit data allocations to user space | 1 | mic@digikod.net | finished in 4h55m0s |
| 2026-05-12 09:10 UTC | memcg: dma-buf per-cgroup accounting via pid_fd | 1 | aesteve@redhat.com | finished in 4h15m0s |
| 2026-05-09 21:38 UTC | security, sched: Expand task_setscheduler LSM hook and related fixes | 2 | atomlin@atomlin.com | finished in 4h15m0s |
| 2026-05-09 16:48 UTC | security, sched: Expand task_setscheduler LSM hook and related fixes | 1 | atomlin@atomlin.com | finished in 4h14m0s |
| 2026-05-09 01:52 UTC | lsm: Replace security_sb_mount with granular mount hooks | 3 | song@kernel.org | finished in 4h14m0s |
| 2026-05-07 19:13 UTC | Reintroduce Hornet LSM | 7 | bboscaccy@linux.microsoft.com | finished in 4h31m0s |
| 2026-05-05 09:05 UTC | module: Introduce hash-based integrity checking | 5 | linux@weissschuh.net | finished in 4h6m0s |
| 2026-05-03 21:18 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 2 | dwindsor@gmail.com | finished in 4h3m0s |
| 2026-05-02 12:43 UTC | landlock: Add UDP access control support | 4 | matthieu@buffet.re | finished in 3h54m0s |
| 2026-04-30 00:03 UTC | lsm: Replace security_sb_mount with granular mount hooks | 2 | song@kernel.org | finished in 4h50m0s |
| 2026-04-27 00:15 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 1 | dwindsor@gmail.com | finished in 4h3m0s |
| 2026-04-20 21:26 UTC | Reintroduce Hornet LSM | 5 | bboscaccy@linux.microsoft.com | finished in 4h16m0s |
| 2026-04-16 17:33 UTC | Reintroduce Hornet LSM | 4 | bboscaccy@linux.microsoft.com | finished in 4h8m0s |
| 2026-04-07 20:01 UTC | BPF interface for applying Landlock rulesets | 1 | utilityemal77@gmail.com | finished in 4h33m0s |
| 2026-04-06 14:36 UTC | Landlock tracepoints | 2 | mic@digikod.net | skipped |
| 2026-04-03 03:08 UTC | Fix incorrect overlayfs mmap() and mprotect() LSM access controls | 4 | paul@paul-moore.com | finished in 4h8m0s |
| 2026-03-27 22:04 UTC | Fix incorrect overlayfs mmap() and mprotect() LSM access controls | 3 | paul@paul-moore.com | finished in 4h12m0s |
| 2026-03-26 06:06 UTC | Reintrodce Hornet LSM | 3 | bboscaccy@linux.microsoft.com | finished in 4h14m0s |
| 2026-03-23 04:24 UTC | Fix incorrect overlayfs mmap() and mprotect() LSM access controls | 2 | paul@paul-moore.com | finished in 4h0m0s |
| 2026-03-20 13:53 UTC | backing_file: store an internal O_PATH user_path_file | 7 | amir73il@gmail.com | finished in 4h10m0s |
| 2026-03-20 12:29 UTC | fs: allow backing file code to open an O_PATH file with negative dentry | 2 | amir73il@gmail.com | finished in 4h27m0s |
| 2026-03-19 12:46 UTC | fs: allow vfs code to open an O_PATH file with negative dentry | 1 | amir73il@gmail.com | finished in 4h11m0s |
| 2026-03-18 18:43 UTC | lsm: Replace security_sb_mount with granular mount hooks | 1 | song@kernel.org | finished in 4h28m0s |
| 2026-03-18 13:12 UTC | backing_file: store user_path_file | 6 | amir73il@gmail.com | finished in 4h9m0s |
| 2026-03-16 21:35 UTC | Fix incorrect overlayfs mmap() and mprotect() LSM access controls | 1 | paul@paul-moore.com | finished in 24m0s |
| 2026-03-16 19:02 UTC | vfs: follow-on fixes for i_ino widening | 3 | jlayton@kernel.org | finished in 4h4m0s |
| 2026-03-13 18:45 UTC | vfs: follow-on fixes for i_ino widening | 2 | jlayton@kernel.org | finished in 3h55m0s |
| 2026-03-12 10:04 UTC | Landlock: Namespace and capability control | 1 | mic@digikod.net | finished in 3h57m0s |
| 2026-03-11 21:31 UTC | audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs | 1 | fred@cloudflare.com | finished in 2h3m0s |
| 2026-03-11 05:19 UTC | udp: Retire UDP-Lite. | 3 | kuniyu@google.com | finished in 4h24m0s |
| 2026-03-10 14:56 UTC | kthread, exit: clean up kernel thread exit paths | 2 | brauner@kernel.org | finished in 3h59m0s |
| 2026-03-10 11:48 UTC | treewide: Use IS_ERR_OR_NULL over manual NULL check - refactor | 1 | phahn-oss@avm.de | finished in 4h4m0s |
| 2026-03-08 20:57 UTC | FIXUP: cachefiles: change cachefiles_bury_object to use start_renaming_dentry() | 1 | neilb@ownmail.net | skipped |
| 2026-03-05 21:49 UTC | udp: Retire UDP-Lite. | 2 | kuniyu@google.com | finished in 4h6m0s |
| 2026-03-05 09:31 UTC | module: Move 'struct module_signature' to UAPI | 3 | thomas.weissschuh@linutronix.de | finished in 58m0s |
| 2026-03-05 07:11 UTC | module: Move 'struct module_signature' to UAPI | 2 | thomas.weissschuh@linutronix.de | finished in 57m0s |
| 2026-03-04 19:28 UTC | udp: Retire UDP-Lite. | 1 | kuniyu@google.com | finished in 4h13m0s |
| 2026-03-02 12:42 UTC | modules: Move 'struct module_signature' to UAPI | 1 | thomas.weissschuh@linutronix.de | finished in 1h30m0s |
| 2026-02-27 23:38 UTC | Reintrodce Hornet LSM | 2 | bboscaccy@linux.microsoft.com | finished in 4h12m0s |
| 2026-02-24 22:16 UTC | Further centralising of directory locking for name ops. | 3 | neilb@ownmail.net | finished in 1h14m0s |
| 2026-02-24 11:17 UTC | rust: add `Ownable` trait and `Owned` type | 16 | a.hindborg@kernel.org | finished in 1h11m0s |
| 2026-02-23 01:06 UTC | Further centralising of directory locking for name ops. | 2 | neilb@ownmail.net | finished in 3h50m0s |
| 2026-02-20 09:51 UTC | rust: add `Ownable` trait and `Owned` type | 15 | a.hindborg@kernel.org | finished in 1h3m0s |
| 2026-02-19 20:04 UTC | lsm: Add LSM hook security_unix_find | 6 | utilityemal77@gmail.com | finished in 4h4m0s |
| 2026-02-16 15:06 UTC | fanotify: avid some premature LSM checks | 1 | omosnace@redhat.com | finished in 1h53m0s |
| 2026-02-06 18:02 UTC | fs/pidfs: Add permission check to pidfd_info() | 1 | danieldurning.work@gmail.com | finished in 4h0m0s |
| 2026-02-05 10:51 UTC | Make Rust Binder build as a module | 1 | aliceryhl@google.com | finished in 3h57m0s |
| 2026-02-04 11:56 UTC | rust: add `Ownable` trait and `Owned` type | 14 | a.hindborg@kernel.org | finished in 1h2m0s |
| 2026-02-04 04:57 UTC | Further centralising of directory locking for name ops. | 1 | neilb@ownmail.net | skipped |
| 2026-01-30 00:14 UTC | ipe: document AT_EXECVE_CHECK TOCTOU issue on OverlayFS | 1 | wufan@kernel.org | finished in 57m0s |
| 2026-01-29 22:51 UTC | lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY | 1 | paul@paul-moore.com | finished in 3h54m0s |
| 2026-01-23 10:08 UTC | xfrm: kill xfrm_dev_{state,policy}_flush_secctx_check() | 1 | penguin-kernel@i-love.sakura.ne.jp | finished in 3h50m0s |
| 2026-01-20 15:57 UTC | cipso: harden use of skb_cow() in cipso_v4_skbuff_setattr() | 1 | whrosenb@asu.edu | finished in 4h2m0s |
| 2026-01-20 14:10 UTC | net: uapi: Provide an UAPI definition of 'struct sockaddr' | 2 | thomas.weissschuh@linutronix.de | finished in 1h5m0s |
| 2025-12-31 21:33 UTC | lsm: Add hook unix_path_connect | 1 | utilityemal77@gmail.com |
finished
in 3h54m0s
[3 findings] |
| 2025-12-19 17:36 UTC | ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() | 1 | whrosenb@asu.edu | finished in 4h13m0s |
| 2025-12-19 15:39 UTC | Compiler-Based Context- and Locking-Analysis | 5 | elver@google.com | finished in 3h51m0s |
| 2025-12-19 08:15 UTC | exec: Fix dead-lock in de_thread with ptrace_attach | 19 | bernd.edlinger@hotmail.de | finished in 3h56m0s |
| 2025-12-12 16:36 UTC | landlock: Add UDP access control support | 3 | matthieu@buffet.re | skipped |
| 2025-12-06 08:38 UTC | net: ipv6: fix spelling typos in comments | 2 | i.shihao.999@gmail.com | skipped |