| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-09-14 16:41 UTC | keys: Add well known IDs for fs-verity/dm-verity keys | 1 | andrew@amutable.com | finished in 4h4m0s |
| 2026-09-11 07:57 UTC | sched: introduce for_each_process_rculock and for_each_thread_rculock | 3 | ye.liu@linux.dev | finished in 4h10m0s |
| 2026-09-10 09:00 UTC | rust: add `Ownable` trait and `Owned` type | 21 | a.hindborg@kernel.org | finished in 3h57m0s |
| 2026-09-09 19:37 UTC | BPF interface for applying Landlock rulesets | 3 | utilityemal77@gmail.com | finished in 4h6m0s |
| 2026-09-09 15:34 UTC | KEYS: encrypted: fix integer overflow of datablob_len | 3 | cenzhang@linux.microsoft.com | finished in 3h54m0s |
| 2026-09-09 09:01 UTC | fs: preserve superblock inode walk positions across lock drops | 1 | sunjunchao@bytedance.com | finished in 4h49m0s |
| 2026-09-07 21:00 UTC | proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem | 3 | jannh@google.com | finished in 3h56m0s |
| 2026-09-07 08:13 UTC | sched: introduce for_each_process_rculock and for_each_thread_rculock | 2 | ye.liu@linux.dev | finished in 4h25m0s |
| 2026-09-04 14:48 UTC | lsm: expose mount idmaps to inode hooks | 3 | devnull@kernel.org | finished in 3h49m0s |
| 2026-09-02 22:01 UTC | Change skb secmarks to x-array indexes | 2 | casey@schaufler-ca.com | finished in 4h33m0s |
| 2026-09-02 14:43 UTC | audit: log all six syscall arguments in the SYSCALL record | 2 | rrobaina@redhat.com | finished in 4h47m0s |
| 2026-09-01 12:50 UTC | lsm: expose mount idmaps to inode hooks | 2 | devnull@kernel.org | finished in 4h24m0s |
| 2026-09-01 12:14 UTC | fs: port to const struct mnt_idmap | 1 | brauner@kernel.org | skipped |
| 2026-08-31 22:37 UTC | Change skb secmarks to x-array indexes | 1 | casey@schaufler-ca.com |
finished
in 1h50m0s
[1 findings] |
| 2026-08-31 14:58 UTC | BPF interface for applying Landlock rulesets | 2 | utilityemal77@gmail.com | finished in 3h42m0s |
| 2026-08-31 13:27 UTC | netlabel: fix IPv6 unlabeled address add error handling | 1 | sashal@kernel.org | skipped |
| 2026-08-31 11:09 UTC | Add new way to add BPF LSM hooks | 1 | a.s.protopopov@gmail.com | finished in 4h41m0s |
| 2026-08-31 02:59 UTC | pidfd: add task path ioctls | 2 | devnull@kernel.org | finished in 4h8m0s |
| 2026-08-29 21:32 UTC | selinux: fix nested backing-file mprotect checks | 3 | kmehltretter@gmail.com | finished in 2h6m0s |
| 2026-08-25 18:39 UTC | proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem | 2 | jannh@google.com | finished in 3h57m0s |
| 2026-08-24 13:28 UTC | lsm: expose mount idmaps to inode hooks | 1 | devnull@kernel.org | finished in 57m0s |
| 2026-08-24 11:17 UTC | rust: add `Ownable` trait and `Owned` type | 20 | a.hindborg@kernel.org | skipped |
| 2026-08-20 17:58 UTC | selinux: preserve user SID across nested backing files | 2 | kmehltretter@gmail.com | finished in 1h31m0s |
| 2026-08-20 06:13 UTC | selinux: preserve user SID across nested backing files | 1 | kmehltretter@gmail.com | finished in 1h28m0s |
| 2026-08-20 05:45 UTC | pidfd: add task path ioctls | 1 | devnull@kernel.org | finished in 4h9m0s |
| 2026-08-18 19:51 UTC | proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem | 1 | jannh@google.com | finished in 4h11m0s |
| 2026-08-18 18:28 UTC | audit: free proctitle in context so it can be re-set by fork on exec_binprm | 3 | rgb@redhat.com | finished in 4h11m0s |
| 2026-08-15 11:20 UTC | lsm: give BPF programs a way to query locked_down state | 1 | utilityemal77@gmail.com | finished in 1h40m0s |
| 2026-08-13 20:48 UTC | Change skb secmarks to x-array indexes | 1 | casey@schaufler-ca.com | finished in 5h7m0s |
| 2026-08-13 17:02 UTC | audit: log all six syscall arguments in the SYSCALL record | 1 | rrobaina@redhat.com | finished in 4h18m0s |
| 2026-08-13 00:26 UTC | bpf: Introduce LOADER_LOAD_FD | 1 | tweek@google.com | finished in 4h0m0s |
| 2026-08-11 17:52 UTC | CRASH_WIPE_SECRETS: Wipe secrets before kdump (was: CRASH_ZEROIZE) | 2 | linux@jaseg.de | finished in 4h1m0s |
| 2026-08-06 21:16 UTC | audit: free proctitle in context so it can be re-set by fork on exec_binprm | 2 | rgb@redhat.com | finished in 4h25m0s |
| 2026-08-04 03:42 UTC | fs: fix user path of nested backing files | 1 | libaokun@linux.alibaba.com | finished in 4h40m0s |
| 2026-07-31 15:46 UTC | CRASH_ZEROIZE: Wipe secrets before kdump | 1 | linux@jaseg.de | skipped |
| 2026-07-31 02:20 UTC | BPF interface for applying Landlock rulesets | 1 | utilityemal77@gmail.com | finished in 3h53m0s |
| 2026-07-30 23:45 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 6 | dwindsor@gmail.com | finished in 4h32m0s |
| 2026-07-30 22:15 UTC | selinux: bpf: check SBLABEL_MNT before isec init | 2 | cmllamas@google.com | finished in 2h19m0s |
| 2026-07-30 18:10 UTC | selinux: bpf: check SBLABEL_MNT before isec init | 1 | cmllamas@google.com | finished in 2h0m0s |
| 2026-07-29 09:07 UTC | netlabel: check register_netdevice_notifier() error in netlbl_unlabel_init() | 2 | heminhong@kylinos.cn | skipped |
| 2026-07-28 03:10 UTC | netlabel: check register_netdevice_notifier() error in netlbl_unlabel_init() | 1 | heminhong@kylinos.cn | skipped |
| 2026-07-27 17:37 UTC | audit: add FSCONFIG auxiliary record to log filesystem configuration | 2 | rrobaina@redhat.com | skipped |
| 2026-07-26 21:37 UTC | audit: free proctitle in context so it can be set by fork | 1 | rgb@redhat.com | finished in 5h17m0s |
| 2026-07-26 16:13 UTC | Landlock: Namespace and capability control | 3 | mic@digikod.net | finished in 5h19m0s |
| 2026-07-24 15:02 UTC | audit: add CLONE3 auxiliary record to log process cloning | 1 | rrobaina@redhat.com | skipped |
| 2026-07-20 01:41 UTC | security: Expand task_setscheduler LSM hook | 4 | atomlin@atomlin.com | skipped |
| 2026-07-16 14:31 UTC | pidfd: add a minimal process spawn builder | 1 | me@linux.beauty | skipped |
| 2026-07-13 17:00 UTC | audit: add MOVE_MOUNT auxiliary record to log mount relocation | 1 | rrobaina@redhat.com | skipped |
| 2026-07-13 17:00 UTC | audit: add FSCONFIG auxiliary record to log filesystem configuration | 1 | rrobaina@redhat.com | skipped |
| 2026-07-10 16:42 UTC | vfs: call audit_inode_child() in lookup_open() on failure | 1 | jkoolstra@xs4all.nl | finished in 4h48m0s |
| 2026-07-09 07:34 UTC | bpf: Fix security_bpf_map_create error handling | 1 | daniel@iogearbox.net | finished in 6h34m0s |
| 2026-07-08 07:53 UTC | Verify BPF signed loader at load time | 6 | daniel@iogearbox.net | finished in 4h47m0s |
| 2026-07-08 00:09 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 5 | dwindsor@gmail.com | finished in 5h21m0s |
| 2026-07-07 19:30 UTC | Verify BPF signed loader at load time | 5 | daniel@iogearbox.net | finished in 5h0m0s |
| 2026-07-06 23:50 UTC | lsm: Replace security_sb_mount with granular mount hooks | 6 | song@kernel.org | finished in 4h35m0s |
| 2026-07-06 13:56 UTC | Verify BPF signed loader at load time | 4 | daniel@iogearbox.net | finished in 4h43m0s |
| 2026-07-03 12:25 UTC | audit: add FSOPEN record to log filesystem name | 2 | rrobaina@redhat.com | skipped |
| 2026-07-03 07:39 UTC | coredump, net: fix layer violation with direct connection | 1 | john.ericson@obsidian.systems | finished in 4h39m0s |
| 2026-07-02 14:36 UTC | Verify BPF signed loader at load time | 3 | daniel@iogearbox.net | finished in 4h52m0s |
| 2026-07-01 13:24 UTC | audit: add FSOPEN record to log filesystem name | 1 | rrobaina@redhat.com | skipped |
| 2026-07-01 08:07 UTC | bpf,lsm: drop bpf_prog_free from sleepable_lsm_hooks | 2 | rhkrqnwk98@gmail.com | finished in 1h46m0s |
| 2026-06-30 18:39 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 4 | dwindsor@gmail.com | finished in 5h14m0s |
| 2026-06-30 10:15 UTC | selinux: hooks: use kmalloc() to allocate path buffer | 2 | rppt@kernel.org | finished in 4h24m0s |
| 2026-06-28 20:11 UTC | bpf: reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized | 1 | mattbobrowski@google.com | finished in 4h1m0s |
| 2026-06-28 10:07 UTC | rust: aref: make `AlwaysRefCounted::inc_ref` an associated function | 7 | trev@trevrosa.dev | skipped |
| 2026-06-28 09:51 UTC | rust: aref: make `AlwaysRefCounted::inc_ref` an associated function | 6 | trev@trevrosa.dev | skipped |
| 2026-06-28 09:28 UTC | rust: aref: make `AlwaysRefCounted::inc_ref` an associated function | 5 | trev@trevrosa.dev | skipped |
| 2026-06-26 11:53 UTC | rust: add `Ownable` trait and `Owned` type | 19 | a.hindborg@kernel.org | skipped |
| 2026-06-26 09:37 UTC | bpf: move security_bpf_prog_free() out of RCU callback | 1 | rhkrqnwk98@gmail.com | finished in 4h58m0s |
| 2026-06-25 10:15 UTC | rust: add `Ownable` trait and `Owned` type | 18 | a.hindborg@kernel.org | skipped |
| 2026-06-24 14:02 UTC | Verify BPF signed loader at load time | 2 | daniel@iogearbox.net | finished in 4h17m0s |
| 2026-06-22 04:05 UTC | Prepare mutable list iterators to cache cursor state | 3 | kaitao.cheng@linux.dev | skipped |
| 2026-06-19 13:03 UTC | bpf: lsm: disable xfrm_decode_session hook attachment | 1 | include@grrlz.net | finished in 4h19m0s |
| 2026-06-19 00:22 UTC | tomoyo: Enforce connect policy in TCP Fast Open | 1 | matthieu@buffet.re | finished in 4h12m0s |
| 2026-06-18 20:34 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 3 | dwindsor@gmail.com | finished in 4h10m0s |
| 2026-06-16 12:36 UTC | io_uring, audit: don't log IORING_OP_RECV_ZC | 1 | rrobaina@redhat.com | finished in 4h45m0s |
| 2026-06-11 18:59 UTC | Add LoadPin support for eBPF program loading | 1 | devnull@kernel.org | finished in 2h17m0s |
| 2026-06-10 23:03 UTC | Verify BPF signed loader at load time | 1 | daniel@iogearbox.net | finished in 4h35m0s |
| 2026-06-04 20:11 UTC | rust: add `Ownable` trait and `Owned` type | 17 | a.hindborg@kernel.org | finished in 1h45m0s |
| 2026-06-01 03:06 UTC | fork: Ensure copy_process() returns a valid error pointer on failure | 1 | hushijia1@uniontech.com | finished in 4h29m0s |
| 2026-05-28 18:26 UTC | lsm: Replace security_sb_mount with granular mount hooks | 5 | song@kernel.org | finished in 4h47m0s |
| 2026-05-28 01:59 UTC | netlabel: validate unlabeled mask attribute length | 2 | zhaochenguang@kylinos.cn | finished in 4h48m0s |
| 2026-05-27 19:21 UTC | netlink, audit: prevent false ENOBUFS on timeout expiry | 3 | rrobaina@redhat.com | finished in 4h51m0s |
| 2026-05-27 18:11 UTC | Landlock: Namespace and capability control | 2 | mic@digikod.net | finished in 4h30m0s |
| 2026-05-26 19:05 UTC | xfrm: XFRM_MSG_MIGRATE_STATE new netlink message | 9 | antony.antony@secunet.com | finished in 4h39m0s |
| 2026-05-26 14:28 UTC | security: Expand task_setscheduler LSM hook to include CPU affinity mask | 3 | atomlin@atomlin.com | finished in 4h26m0s |
| 2026-05-24 04:14 UTC | net: trust-after-modification fixes for IPv4 options + netlabel | 2 | tpluszz77@gmail.com | finished in 3h55m0s |
| 2026-05-23 16:00 UTC | lsm,bpf: fix security_bpf_prog_load() error handling | 1 | paul@paul-moore.com | finished in 4h0m0s |
| 2026-05-22 02:32 UTC | Signed BPF + IPE Policies | 1 | kpsingh@kernel.org | skipped |
| 2026-05-20 08:18 UTC | security: replace __get_free_pages() call with kmalloc() | 1 | rppt@kernel.org | finished in 4h21m0s |
| 2026-05-15 20:01 UTC | lsm: Replace security_sb_mount with granular mount hooks | 4 | song@kernel.org | finished in 4h45m0s |
| 2026-05-13 18:03 UTC | landlock: Account all audit data allocations to user space | 1 | mic@digikod.net | finished in 4h55m0s |
| 2026-05-13 17:24 UTC | netlink, audit: prevent false ENOBUFS on timeout expiry | 2 | rrobaina@redhat.com | finished in 4h37m0s |
| 2026-05-12 09:10 UTC | memcg: dma-buf per-cgroup accounting via pid_fd | 1 | aesteve@redhat.com | finished in 4h15m0s |
| 2026-05-11 18:43 UTC | netlink, audit: prevent false ENOBUFS on timeout expiry | 1 | rrobaina@redhat.com | finished in 5h10m0s |
| 2026-05-09 21:38 UTC | security, sched: Expand task_setscheduler LSM hook and related fixes | 2 | atomlin@atomlin.com | finished in 4h15m0s |
| 2026-05-09 16:48 UTC | security, sched: Expand task_setscheduler LSM hook and related fixes | 1 | atomlin@atomlin.com | finished in 4h14m0s |
| 2026-05-09 01:52 UTC | lsm: Replace security_sb_mount with granular mount hooks | 3 | song@kernel.org | finished in 4h14m0s |
| 2026-05-07 19:13 UTC | Reintroduce Hornet LSM | 7 | bboscaccy@linux.microsoft.com | finished in 4h31m0s |
| 2026-05-05 09:05 UTC | module: Introduce hash-based integrity checking | 5 | linux@weissschuh.net | finished in 4h6m0s |