| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-09-28 17:17 UTC | CRASH_MEMACTION: describe pages to a kdump kernel (was: CRASH_WIPE_SECRETS) | 3 | linux@jaseg.de | - |
| 2026-09-24 10:35 UTC | landlock: Add READ_METADATA and WRITE_METADATA access rights | 1 | caixinchen1@huawei.com | skipped |
| 2026-09-22 13:26 UTC | landlock: Widen ruleset versions to 64 bits | 1 | mic@digikod.net | skipped |
| 2026-09-21 09:20 UTC | sched: introduce for_each_process_rculock and for_each_thread_rculock | 4 | ye.liu@linux.dev | finished in 4h6m0s |
| 2026-09-20 23:52 UTC | certs: x509: duplicate cert->tbs when sig->algo_takes_data is set | 2 | benquike@gmail.com | finished in 4h16m0s |
| 2026-09-19 22:34 UTC | netlabel: calipso, x509: clean up ADDRSELECT on DOI removal and check AKID len | 1 | benquike@gmail.com | finished in 5h16m0s |
| 2026-09-19 21:52 UTC | netlabel: cipso_v4: reject empty MLS level/cat lists and zero tail in cipso_v4_delopt() | 1 | benquike@gmail.com | finished in 5h2m0s |
| 2026-09-19 21:06 UTC | ipv6: calipso: fix 8-bit hdrlen overflow and missing pskb_may_pull() in hop-by-hop options | 1 | benquike@gmail.com | finished in 5h17m0s |
| 2026-09-19 03:53 UTC | smack: reject relabel-self writes from io_uring workers | 1 | ngocthang2710.1999@gmail.com | finished in 2h40m0s |
| 2026-09-18 18:50 UTC | landlock: Fix tracepoint policy context | 1 | mic@digikod.net | finished in 3h51m0s |
| 2026-09-17 16:43 UTC | apparmor: Fix namespace reference leak in __aa_find_or_create_ns() | 1 | vulab@iscas.ac.cn | finished in 5h2m0s |
| 2026-09-17 16:41 UTC | apparmor: Fix label reference leak in aa_unix_file_perm() | 1 | vulab@iscas.ac.cn | finished in 4h44m0s |
| 2026-09-14 16:41 UTC | keys: Add well known IDs for fs-verity/dm-verity keys | 1 | andrew@amutable.com | finished in 4h4m0s |
| 2026-09-11 14:46 UTC | Bring includes in linux/kmod.h up to date | 3 | petr.pavlu@suse.com | skipped |
| 2026-09-11 07:57 UTC | sched: introduce for_each_process_rculock and for_each_thread_rculock | 3 | ye.liu@linux.dev | finished in 4h10m0s |
| 2026-09-10 09:00 UTC | rust: add `Ownable` trait and `Owned` type | 21 | a.hindborg@kernel.org | finished in 3h57m0s |
| 2026-09-09 19:37 UTC | BPF interface for applying Landlock rulesets | 3 | utilityemal77@gmail.com | finished in 4h6m0s |
| 2026-09-09 15:34 UTC | KEYS: encrypted: fix integer overflow of datablob_len | 3 | cenzhang@linux.microsoft.com | finished in 3h54m0s |
| 2026-09-09 09:01 UTC | fs: preserve superblock inode walk positions across lock drops | 1 | sunjunchao@bytedance.com | finished in 4h49m0s |
| 2026-09-07 21:00 UTC | proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem | 3 | jannh@google.com | finished in 3h56m0s |
| 2026-09-07 08:13 UTC | sched: introduce for_each_process_rculock and for_each_thread_rculock | 2 | ye.liu@linux.dev | finished in 4h25m0s |
| 2026-09-04 14:48 UTC | lsm: expose mount idmaps to inode hooks | 3 | devnull@kernel.org | finished in 3h49m0s |
| 2026-09-02 22:01 UTC | Change skb secmarks to x-array indexes | 2 | casey@schaufler-ca.com | finished in 4h33m0s |
| 2026-09-01 12:50 UTC | lsm: expose mount idmaps to inode hooks | 2 | devnull@kernel.org | finished in 4h24m0s |
| 2026-09-01 12:14 UTC | fs: port to const struct mnt_idmap | 1 | brauner@kernel.org | skipped |
| 2026-08-31 22:37 UTC | Change skb secmarks to x-array indexes | 1 | casey@schaufler-ca.com |
finished
in 1h50m0s
[1 findings] |
| 2026-08-31 14:58 UTC | BPF interface for applying Landlock rulesets | 2 | utilityemal77@gmail.com | finished in 3h42m0s |
| 2026-08-31 13:27 UTC | netlabel: fix IPv6 unlabeled address add error handling | 1 | sashal@kernel.org | skipped |
| 2026-08-31 11:09 UTC | Add new way to add BPF LSM hooks | 1 | a.s.protopopov@gmail.com | finished in 4h41m0s |
| 2026-08-31 02:59 UTC | pidfd: add task path ioctls | 2 | devnull@kernel.org | finished in 4h8m0s |
| 2026-08-30 20:16 UTC | landlock: Support MPTCP bind and connect restrictions | 1 | gnoack3000@gmail.com | finished in 4h26m0s |
| 2026-08-25 18:39 UTC | proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem | 2 | jannh@google.com | finished in 3h57m0s |
| 2026-08-24 13:28 UTC | lsm: expose mount idmaps to inode hooks | 1 | devnull@kernel.org | finished in 57m0s |
| 2026-08-24 11:17 UTC | rust: add `Ownable` trait and `Owned` type | 20 | a.hindborg@kernel.org | skipped |
| 2026-08-20 05:45 UTC | pidfd: add task path ioctls | 1 | devnull@kernel.org | finished in 4h9m0s |
| 2026-08-18 19:51 UTC | proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem | 1 | jannh@google.com | finished in 4h11m0s |
| 2026-08-15 11:20 UTC | lsm: give BPF programs a way to query locked_down state | 1 | utilityemal77@gmail.com | finished in 1h40m0s |
| 2026-08-13 20:48 UTC | Change skb secmarks to x-array indexes | 1 | casey@schaufler-ca.com | finished in 5h7m0s |
| 2026-08-11 17:52 UTC | CRASH_WIPE_SECRETS: Wipe secrets before kdump (was: CRASH_ZEROIZE) | 2 | linux@jaseg.de | finished in 4h1m0s |
| 2026-07-31 16:27 UTC | CRASH_ZEROIZE: Wipe secrets before kdump | 1 | linux@jaseg.de | finished in 1h54m0s |
| 2026-07-31 02:20 UTC | BPF interface for applying Landlock rulesets | 1 | utilityemal77@gmail.com | finished in 3h53m0s |
| 2026-07-30 23:45 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 6 | dwindsor@gmail.com | finished in 4h32m0s |
| 2026-07-29 09:07 UTC | netlabel: check register_netdevice_notifier() error in netlbl_unlabel_init() | 2 | heminhong@kylinos.cn | skipped |
| 2026-07-28 03:10 UTC | netlabel: check register_netdevice_notifier() error in netlbl_unlabel_init() | 1 | heminhong@kylinos.cn | skipped |
| 2026-07-26 16:13 UTC | Landlock: Namespace and capability control | 3 | mic@digikod.net | finished in 5h19m0s |
| 2026-07-21 13:11 UTC | Bring includes in linux/kmod.h up to date | 2 | petr.pavlu@suse.com | skipped |
| 2026-07-20 01:41 UTC | security: Expand task_setscheduler LSM hook | 4 | atomlin@atomlin.com | skipped |
| 2026-07-16 14:31 UTC | pidfd: add a minimal process spawn builder | 1 | me@linux.beauty | skipped |
| 2026-07-08 15:44 UTC | Bring includes in linux/kmod.h up to date | 1 | petr.pavlu@suse.com | skipped |
| 2026-07-08 07:53 UTC | Verify BPF signed loader at load time | 6 | daniel@iogearbox.net | finished in 4h47m0s |
| 2026-07-08 00:09 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 5 | dwindsor@gmail.com | finished in 5h21m0s |
| 2026-07-07 19:30 UTC | Verify BPF signed loader at load time | 5 | daniel@iogearbox.net | finished in 5h0m0s |
| 2026-07-06 23:50 UTC | lsm: Replace security_sb_mount with granular mount hooks | 6 | song@kernel.org | finished in 4h35m0s |
| 2026-07-06 13:56 UTC | Verify BPF signed loader at load time | 4 | daniel@iogearbox.net | finished in 4h43m0s |
| 2026-07-03 07:39 UTC | coredump, net: fix layer violation with direct connection | 1 | john.ericson@obsidian.systems | finished in 4h39m0s |
| 2026-07-02 14:36 UTC | Verify BPF signed loader at load time | 3 | daniel@iogearbox.net | finished in 4h52m0s |
| 2026-07-02 09:33 UTC | Fix quota evasion on xfs and add capable_noaudit | 3 | cem@kernel.org | finished in 3h48m0s |
| 2026-06-30 18:39 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 4 | dwindsor@gmail.com | finished in 5h14m0s |
| 2026-06-28 10:07 UTC | rust: aref: make `AlwaysRefCounted::inc_ref` an associated function | 7 | trev@trevrosa.dev | skipped |
| 2026-06-28 09:51 UTC | rust: aref: make `AlwaysRefCounted::inc_ref` an associated function | 6 | trev@trevrosa.dev | skipped |
| 2026-06-28 09:28 UTC | rust: aref: make `AlwaysRefCounted::inc_ref` an associated function | 5 | trev@trevrosa.dev | skipped |
| 2026-06-26 11:53 UTC | rust: add `Ownable` trait and `Owned` type | 19 | a.hindborg@kernel.org | skipped |
| 2026-06-26 11:45 UTC | Introduce capable_noaudit | 1 | cem@kernel.org | skipped |
| 2026-06-25 10:15 UTC | rust: add `Ownable` trait and `Owned` type | 18 | a.hindborg@kernel.org | skipped |
| 2026-06-24 14:02 UTC | Verify BPF signed loader at load time | 2 | daniel@iogearbox.net | finished in 4h17m0s |
| 2026-06-19 13:03 UTC | bpf: lsm: disable xfrm_decode_session hook attachment | 1 | include@grrlz.net | finished in 4h19m0s |
| 2026-06-19 00:22 UTC | tomoyo: Enforce connect policy in TCP Fast Open | 1 | matthieu@buffet.re | finished in 4h12m0s |
| 2026-06-18 20:34 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 3 | dwindsor@gmail.com | finished in 4h10m0s |
| 2026-06-11 18:59 UTC | Add LoadPin support for eBPF program loading | 1 | devnull@kernel.org | finished in 2h17m0s |
| 2026-06-11 16:21 UTC | landlock: Add UDP access control support | 5 | matthieu@buffet.re | finished in 4h6m0s |
| 2026-06-10 23:03 UTC | Verify BPF signed loader at load time | 1 | daniel@iogearbox.net | finished in 4h35m0s |
| 2026-06-04 20:11 UTC | rust: add `Ownable` trait and `Owned` type | 17 | a.hindborg@kernel.org | finished in 1h45m0s |
| 2026-06-01 03:06 UTC | fork: Ensure copy_process() returns a valid error pointer on failure | 1 | hushijia1@uniontech.com | finished in 4h29m0s |
| 2026-05-28 18:26 UTC | lsm: Replace security_sb_mount with granular mount hooks | 5 | song@kernel.org | finished in 4h47m0s |
| 2026-05-28 01:59 UTC | netlabel: validate unlabeled mask attribute length | 2 | zhaochenguang@kylinos.cn | finished in 4h48m0s |
| 2026-05-27 18:11 UTC | Landlock: Namespace and capability control | 2 | mic@digikod.net | finished in 4h30m0s |
| 2026-05-26 14:28 UTC | security: Expand task_setscheduler LSM hook to include CPU affinity mask | 3 | atomlin@atomlin.com | finished in 4h26m0s |
| 2026-05-24 04:14 UTC | net: trust-after-modification fixes for IPv4 options + netlabel | 2 | tpluszz77@gmail.com | finished in 3h55m0s |
| 2026-05-23 16:00 UTC | lsm,bpf: fix security_bpf_prog_load() error handling | 1 | paul@paul-moore.com | finished in 4h0m0s |
| 2026-05-22 21:53 UTC | gen_loader fixes | 3 | kpsingh@kernel.org | finished in 4h19m0s |
| 2026-05-22 02:32 UTC | Signed BPF + IPE Policies | 1 | kpsingh@kernel.org | skipped |
| 2026-05-21 15:22 UTC | gen_loader fixes | 2 | kpsingh@kernel.org | finished in 4h19m0s |
| 2026-05-20 08:18 UTC | security: replace __get_free_pages() call with kmalloc() | 1 | rppt@kernel.org | finished in 4h21m0s |
| 2026-05-20 02:40 UTC | bpf: reject NULL data/sig in bpf_verify_pkcs7_signature | 2 | kpsingh@kernel.org | finished in 4h39m0s |
| 2026-05-19 21:53 UTC | bpf, libbpf: reject non-exclusive metadata maps in the signed loader | 1 | kpsingh@kernel.org | finished in 4h53m0s |
| 2026-05-19 20:09 UTC | bpf: reject NULL data/sig in bpf_verify_pkcs7_signature | 1 | kpsingh@kernel.org | finished in 4h26m0s |
| 2026-05-15 20:01 UTC | lsm: Replace security_sb_mount with granular mount hooks | 4 | song@kernel.org | finished in 4h45m0s |
| 2026-05-13 18:03 UTC | landlock: Account all audit data allocations to user space | 1 | mic@digikod.net | finished in 4h55m0s |
| 2026-05-12 09:10 UTC | memcg: dma-buf per-cgroup accounting via pid_fd | 1 | aesteve@redhat.com | finished in 4h15m0s |
| 2026-05-09 21:38 UTC | security, sched: Expand task_setscheduler LSM hook and related fixes | 2 | atomlin@atomlin.com | finished in 4h15m0s |
| 2026-05-09 16:48 UTC | security, sched: Expand task_setscheduler LSM hook and related fixes | 1 | atomlin@atomlin.com | finished in 4h14m0s |
| 2026-05-09 01:52 UTC | lsm: Replace security_sb_mount with granular mount hooks | 3 | song@kernel.org | finished in 4h14m0s |
| 2026-05-07 19:13 UTC | Reintroduce Hornet LSM | 7 | bboscaccy@linux.microsoft.com | finished in 4h31m0s |
| 2026-05-05 09:05 UTC | module: Introduce hash-based integrity checking | 5 | linux@weissschuh.net | finished in 4h6m0s |
| 2026-05-03 21:18 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 2 | dwindsor@gmail.com | finished in 4h3m0s |
| 2026-05-02 12:43 UTC | landlock: Add UDP access control support | 4 | matthieu@buffet.re | finished in 3h54m0s |
| 2026-04-30 00:03 UTC | lsm: Replace security_sb_mount with granular mount hooks | 2 | song@kernel.org | finished in 4h50m0s |
| 2026-04-27 00:15 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 1 | dwindsor@gmail.com | finished in 4h3m0s |
| 2026-04-20 21:26 UTC | Reintroduce Hornet LSM | 5 | bboscaccy@linux.microsoft.com | finished in 4h16m0s |
| 2026-04-16 17:33 UTC | Reintroduce Hornet LSM | 4 | bboscaccy@linux.microsoft.com | finished in 4h8m0s |