| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-10-16 04:00 UTC | keys: big_key: Reserve the final quota before destroying the payload | 1 | 4ncienth@gmail.com | finished in 4h11m0s |
| 2026-10-15 09:38 UTC | vfs: add inode iteration method super_iter_inodes | 1 | huangsj@hygon.cn | skipped |
| 2026-10-14 20:47 UTC | capabilities: close the ways around the CAP_SETFCAP rule for uid 0 | 2 | josef@toxicpanda.com | finished in 4h0m0s |
| 2026-10-14 08:27 UTC | Landlock: Namespace and capability control | 6 | mic@digikod.net | finished in 3h50m0s |
| 2026-10-13 16:47 UTC | fs: unified VFS ancestor walk for Landlock and BPF | 1 | utilityemal77@gmail.com | finished in 3h53m0s |
| 2026-10-13 09:03 UTC | keys: Fix quota-owner reads and ownership accounting | 4 | nicoyip.dev@gmail.com | finished in 3h58m0s |
| 2026-10-12 21:57 UTC | apparmor: fix query_data() output overlapping the lookup key | 1 | cenzhang@linux.microsoft.com | finished in 4h37m0s |
| 2026-10-10 10:20 UTC | pidfd: add task path ioctls | 3 | devnull@kernel.org | finished in 3h56m0s |
| 2026-10-08 20:57 UTC | keys: Add well known IDs for fs-verity/dm-verity keys | 2 | andrew@amutable.com | finished in 4h1m0s |
| 2026-10-07 10:02 UTC | Landlock: Namespace and capability control | 5 | mic@digikod.net |
finished
in 1h31m0s
[1 findings] |
| 2026-10-06 15:44 UTC | capabilities: close the ways around the CAP_SETFCAP rule for uid 0 | 1 | josef@toxicpanda.com | finished in 4h1m0s |
| 2026-10-06 00:20 UTC | fs: unified VFS ancestor walk for Landlock and BPF | 1 | utilityemal77@gmail.com | finished in 3h48m0s |
| 2026-10-02 12:43 UTC | Landlock: Namespace and capability control | 4 | mic@digikod.net |
finished
in 58m0s
[1 findings] |
| 2026-09-29 13:01 UTC | security: Add PR_CAPBSET_DROP_MASK | 2 | ruanjinjie@huawei.com | finished in 4h31m0s |
| 2026-09-26 16:22 UTC | sysctl: add typed field descriptors | 3 | legion@kernel.org | finished in 3h49m0s |
| 2026-09-24 14:34 UTC | sysctl: add a registration context to share ctl_table arrays | 1 | joel.granados@kernel.org | finished in 3h46m0s |
| 2026-09-21 10:54 UTC | sysctl: add typed field descriptors | 2 | legion@kernel.org | finished in 3h47m0s |
| 2026-09-19 03:53 UTC | smack: reject relabel-self writes from io_uring workers | 1 | ngocthang2710.1999@gmail.com | finished in 2h40m0s |
| 2026-09-17 16:43 UTC | apparmor: Fix namespace reference leak in __aa_find_or_create_ns() | 1 | vulab@iscas.ac.cn | finished in 5h2m0s |
| 2026-09-17 16:41 UTC | apparmor: Fix label reference leak in aa_unix_file_perm() | 1 | vulab@iscas.ac.cn | finished in 4h44m0s |
| 2026-09-14 16:41 UTC | keys: Add well known IDs for fs-verity/dm-verity keys | 1 | andrew@amutable.com | finished in 4h4m0s |
| 2026-09-09 15:34 UTC | KEYS: encrypted: fix integer overflow of datablob_len | 3 | cenzhang@linux.microsoft.com | finished in 3h54m0s |
| 2026-09-09 09:01 UTC | fs: preserve superblock inode walk positions across lock drops | 1 | sunjunchao@bytedance.com | finished in 4h49m0s |
| 2026-09-07 21:00 UTC | proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem | 3 | jannh@google.com | finished in 3h56m0s |
| 2026-09-02 22:01 UTC | Change skb secmarks to x-array indexes | 2 | casey@schaufler-ca.com | finished in 4h33m0s |
| 2026-08-31 22:37 UTC | Change skb secmarks to x-array indexes | 1 | casey@schaufler-ca.com |
finished
in 1h50m0s
[1 findings] |
| 2026-08-31 02:59 UTC | pidfd: add task path ioctls | 2 | devnull@kernel.org | finished in 4h8m0s |
| 2026-08-25 18:39 UTC | proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem | 2 | jannh@google.com | finished in 3h57m0s |
| 2026-08-20 05:45 UTC | pidfd: add task path ioctls | 1 | devnull@kernel.org | finished in 4h9m0s |
| 2026-08-18 19:51 UTC | proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem | 1 | jannh@google.com | finished in 4h11m0s |
| 2026-08-13 20:48 UTC | Change skb secmarks to x-array indexes | 1 | casey@schaufler-ca.com | finished in 5h7m0s |
| 2026-08-04 03:42 UTC | fs: fix user path of nested backing files | 1 | libaokun@linux.alibaba.com | finished in 4h40m0s |
| 2026-07-31 15:46 UTC | CRASH_ZEROIZE: Wipe secrets before kdump | 1 | linux@jaseg.de | skipped |
| 2026-07-30 23:45 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 6 | dwindsor@gmail.com | finished in 4h32m0s |
| 2026-07-26 16:13 UTC | Landlock: Namespace and capability control | 3 | mic@digikod.net | finished in 5h19m0s |
| 2026-07-20 01:41 UTC | security: Expand task_setscheduler LSM hook | 4 | atomlin@atomlin.com | skipped |
| 2026-07-08 00:09 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 5 | dwindsor@gmail.com | finished in 5h21m0s |
| 2026-07-06 23:50 UTC | lsm: Replace security_sb_mount with granular mount hooks | 6 | song@kernel.org | finished in 4h35m0s |
| 2026-07-02 09:33 UTC | Fix quota evasion on xfs and add capable_noaudit | 3 | cem@kernel.org | finished in 3h48m0s |
| 2026-06-30 18:39 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 4 | dwindsor@gmail.com | finished in 5h14m0s |
| 2026-06-26 11:45 UTC | Introduce capable_noaudit | 1 | cem@kernel.org | skipped |
| 2026-06-19 13:03 UTC | bpf: lsm: disable xfrm_decode_session hook attachment | 1 | include@grrlz.net | finished in 4h19m0s |
| 2026-06-18 20:34 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 3 | dwindsor@gmail.com | finished in 4h10m0s |
| 2026-06-11 18:59 UTC | Add LoadPin support for eBPF program loading | 1 | devnull@kernel.org | finished in 2h17m0s |
| 2026-05-28 18:26 UTC | lsm: Replace security_sb_mount with granular mount hooks | 5 | song@kernel.org | finished in 4h47m0s |
| 2026-05-27 18:11 UTC | Landlock: Namespace and capability control | 2 | mic@digikod.net | finished in 4h30m0s |
| 2026-05-26 14:28 UTC | security: Expand task_setscheduler LSM hook to include CPU affinity mask | 3 | atomlin@atomlin.com | finished in 4h26m0s |
| 2026-05-20 08:18 UTC | security: replace __get_free_pages() call with kmalloc() | 1 | rppt@kernel.org | finished in 4h21m0s |
| 2026-05-15 20:01 UTC | lsm: Replace security_sb_mount with granular mount hooks | 4 | song@kernel.org | finished in 4h45m0s |
| 2026-05-12 09:10 UTC | memcg: dma-buf per-cgroup accounting via pid_fd | 1 | aesteve@redhat.com | finished in 4h15m0s |
| 2026-05-09 21:38 UTC | security, sched: Expand task_setscheduler LSM hook and related fixes | 2 | atomlin@atomlin.com | finished in 4h15m0s |
| 2026-05-09 16:48 UTC | security, sched: Expand task_setscheduler LSM hook and related fixes | 1 | atomlin@atomlin.com | finished in 4h14m0s |
| 2026-05-09 01:52 UTC | lsm: Replace security_sb_mount with granular mount hooks | 3 | song@kernel.org | finished in 4h14m0s |
| 2026-05-07 19:13 UTC | Reintroduce Hornet LSM | 7 | bboscaccy@linux.microsoft.com | finished in 4h31m0s |
| 2026-05-05 09:05 UTC | module: Introduce hash-based integrity checking | 5 | linux@weissschuh.net | finished in 4h6m0s |
| 2026-05-03 21:18 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 2 | dwindsor@gmail.com | finished in 4h3m0s |
| 2026-04-30 00:03 UTC | lsm: Replace security_sb_mount with granular mount hooks | 2 | song@kernel.org | finished in 4h50m0s |
| 2026-04-27 00:15 UTC | bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling | 1 | dwindsor@gmail.com | finished in 4h3m0s |
| 2026-04-20 21:26 UTC | Reintroduce Hornet LSM | 5 | bboscaccy@linux.microsoft.com | finished in 4h16m0s |
| 2026-04-16 17:33 UTC | Reintroduce Hornet LSM | 4 | bboscaccy@linux.microsoft.com | finished in 4h8m0s |
| 2026-04-07 20:01 UTC | BPF interface for applying Landlock rulesets | 1 | utilityemal77@gmail.com | finished in 4h33m0s |
| 2026-03-26 06:06 UTC | Reintrodce Hornet LSM | 3 | bboscaccy@linux.microsoft.com | finished in 4h14m0s |
| 2026-03-18 18:43 UTC | lsm: Replace security_sb_mount with granular mount hooks | 1 | song@kernel.org | finished in 4h28m0s |
| 2026-03-16 19:02 UTC | vfs: follow-on fixes for i_ino widening | 3 | jlayton@kernel.org | finished in 4h4m0s |
| 2026-03-13 18:45 UTC | vfs: follow-on fixes for i_ino widening | 2 | jlayton@kernel.org | finished in 3h55m0s |
| 2026-03-12 10:04 UTC | Landlock: Namespace and capability control | 1 | mic@digikod.net | finished in 3h57m0s |
| 2026-03-11 21:31 UTC | audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs | 1 | fred@cloudflare.com | finished in 2h3m0s |
| 2026-03-11 05:19 UTC | udp: Retire UDP-Lite. | 3 | kuniyu@google.com | finished in 4h24m0s |
| 2026-03-08 20:57 UTC | FIXUP: cachefiles: change cachefiles_bury_object to use start_renaming_dentry() | 1 | neilb@ownmail.net | skipped |
| 2026-03-05 21:49 UTC | udp: Retire UDP-Lite. | 2 | kuniyu@google.com | finished in 4h6m0s |
| 2026-03-05 09:31 UTC | module: Move 'struct module_signature' to UAPI | 3 | thomas.weissschuh@linutronix.de | finished in 58m0s |
| 2026-03-05 07:11 UTC | module: Move 'struct module_signature' to UAPI | 2 | thomas.weissschuh@linutronix.de | finished in 57m0s |
| 2026-03-04 19:28 UTC | udp: Retire UDP-Lite. | 1 | kuniyu@google.com | finished in 4h13m0s |
| 2026-03-02 12:42 UTC | modules: Move 'struct module_signature' to UAPI | 1 | thomas.weissschuh@linutronix.de | finished in 1h30m0s |
| 2026-02-27 23:38 UTC | Reintrodce Hornet LSM | 2 | bboscaccy@linux.microsoft.com | finished in 4h12m0s |
| 2026-02-24 22:16 UTC | Further centralising of directory locking for name ops. | 3 | neilb@ownmail.net | finished in 1h14m0s |
| 2026-02-24 09:34 UTC | inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails | 1 | chiamingc@synology.com | finished in 2h25m0s |
| 2026-02-23 01:06 UTC | Further centralising of directory locking for name ops. | 2 | neilb@ownmail.net | finished in 3h50m0s |
| 2026-02-19 20:04 UTC | lsm: Add LSM hook security_unix_find | 6 | utilityemal77@gmail.com | finished in 4h4m0s |
| 2026-02-05 10:51 UTC | Make Rust Binder build as a module | 1 | aliceryhl@google.com | finished in 3h57m0s |
| 2026-02-04 04:57 UTC | Further centralising of directory locking for name ops. | 1 | neilb@ownmail.net | skipped |
| 2025-12-31 21:33 UTC | lsm: Add hook unix_path_connect | 1 | utilityemal77@gmail.com |
finished
in 3h54m0s
[3 findings] |
| 2025-12-19 08:15 UTC | exec: Fix dead-lock in de_thread with ptrace_attach | 19 | bernd.edlinger@hotmail.de | finished in 3h56m0s |
| 2025-12-04 12:59 UTC | bpf, arm64: Do not audit capability check in do_jit() | 1 | omosnace@redhat.com | finished in 48m0s |
| 2025-11-30 22:06 UTC | fuse: fix conversion of fuse_reverse_inval_entry() to start_removing() | 1 | neilb@ownmail.net | finished in 3h50m0s |
| 2025-11-27 00:50 UTC | Introduce bpf_kern_path and bpf_path_put | 1 | song@kernel.org | finished in 3h54m0s |
| 2025-11-18 18:13 UTC | exec: Fix dead-lock in de_thread with ptrace_attach | 18 | bernd.edlinger@hotmail.de | finished in 42m0s |
| 2025-11-13 00:18 UTC | Create and use APIs to centralise locking for directory ops. | 6 | neilb@ownmail.net | finished in 3h56m0s |
| 2025-11-09 17:14 UTC | mt-exec: fix deadlock with ptrace_attach() | 1 | oleg@redhat.com | finished in 3h42m0s |
| 2025-11-06 00:50 UTC | Create and use APIs to centralise locking for directory ops. | 5 | neilb@ownmail.net |
finished
in 3h59m0s
[2 findings] |
| 2025-10-29 23:31 UTC | Create and use APIs to centralise locking for directory ops. | 4 | neilb@ownmail.net | finished in 3m0s |
| 2025-10-21 12:27 UTC | x86/bpf: do not audit capability check in do_jit() | 2 | omosnace@redhat.com | finished in 3h59m0s |
| 2025-08-21 17:34 UTC | exec: Fix dead-lock in de_thread with ptrace_attach | 17 | bernd.edlinger@hotmail.de | finished in 3h45m0s |
| 2025-08-18 20:53 UTC | exec: Fix dead-lock in de_thread with ptrace_attach | 16 | bernd.edlinger@hotmail.de | finished in 3h47m0s |