security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on kvm (capped at 30), ordered by date desc.

• COOLING12d [PATCH 08/11] params: Convert generic kernel_param_ops .get helpers to seq_buf
  2026-05-21 · Kees Cook <kees@kernel.org>
• COOLING12d [PATCH 09/11] treewide: Convert custom kernel_param_ops .get callbacks to seq_buf via cocci
  2026-05-21 · Kees Cook <kees@kernel.org>
• COOLING12d [PATCH 04/11] treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS
  2026-05-21 · Kees Cook <kees@kernel.org>
• STALE96d [PATCH v2 2/2] tree-wide: rename do_exit() to task_exit()
  2026-03-10 · Christian Brauner <brauner@kernel.org>
• STALE67d [PATCH 20/61] apparmor: Prefer IS_ERR_OR_NULL over manual NULL check
  2026-03-10 · Philipp Hahn <hidden>
• STALE328d LANDED [PATCH v4 4/4] kstack_erase: Support Clang stack depth tracking
  2025-07-24 · Kees Cook <kees@kernel.org>
• STALE410d [PATCH RFC v7 3/8] security: Export security_inode_init_security_anon for KVM guest_memfd
  2025-04-08 · Shivank Garg <hidden>
• STALE588d REVIEWED: 3 (3M) [PATCH v3 10/28] fdget_raw() users: switch to CLASS(fd_raw)
  2024-11-02 · Al Viro <viro@zeniv.linux.org.uk>
• STALE588d REVIEWED: 3 (3M) [PATCH v3 15/28] fdget(), more trivial conversions
  2024-11-02 · Al Viro <viro@zeniv.linux.org.uk>
• STALE588d REVIEWED: 3 (3M) [PATCH v3 14/28] fdget(), trivial conversions
  2024-11-02 · Al Viro <viro@zeniv.linux.org.uk>
• STALE588d REVIEWED: 4 (4M) Re: [PATCH 35/39] convert bpf_token_create()
  2024-08-06 · Andrii Nakryiko <hidden>
• STALE588d [PATCH 24/39] fdget(), more trivial conversions
  2024-07-30 · viro@kernel.org
• STALE588d [PATCH 23/39] fdget(), trivial conversions
  2024-07-30 · viro@kernel.org
• STALE588d [PATCH 19/39] fdget_raw() users: switch to CLASS(fd_raw, ...)
  2024-07-30 · viro@kernel.org
• STALE588d [PATCH 02/39] introduce fd_file(), convert all accessors to it.
  2024-07-30 · viro@kernel.org
• STALE774d [PATCH v2 4/5] selftests: Drop define _GNU_SOURCE
  2024-05-07 · Edward Liaw <hidden>
• STALE892d [PATCH 3/3] treewide: Update LLVM Bugzilla links
  2024-01-09 · Nathan Chancellor <nathan@kernel.org>
• STALE983d REVIEWED: 5 (5M) [RFC PATCH v12 13/33] security: Export security_inode_init_security_anon() for use by KVM
  2023-09-14 · Sean Christopherson <seanjc@google.com>
• STALE1018d [RFC PATCH v11 11/29] security: Export security_inode_init_security_anon() for use by KVM
  2023-07-18 · Sean Christopherson <seanjc@google.com>
• STALE1132d REVIEWED: 5 (4M) [PATCH v6 3/6] mm/gup: remove vmas parameter from get_user_pages_remote()
  2023-05-17 · Lorenzo Stoakes <hidden>
• STALE1132d REVIEWED: 1 (0M) [PATCH v5 3/6] mm/gup: remove vmas parameter from get_user_pages_remote()
  2023-05-14 · Lorenzo Stoakes <hidden>
• STALE1156d REVIEWED: 1 (0M) [PATCH v4 3/6] mm/gup: remove vmas parameter from get_user_pages_remote()
  2023-04-18 · Lorenzo Stoakes <hidden>
• STALE1162d [PATCH v3 3/7] mm/gup: remove vmas parameter from get_user_pages_remote()
  2023-04-15 · Lorenzo Stoakes <hidden>
• STALE1164d [PATCH v2 3/7] mm/gup: remove vmas parameter from get_user_pages_remote()
  2023-04-15 · Lorenzo Stoakes <hidden>
• STALE1161d [PATCH 3/7] mm/gup: remove vmas parameter from get_user_pages_remote()
  2023-04-14 · Lorenzo Stoakes <hidden>
• STALE1533d [RFC PATCH 31/47] mm: asi: Support for non-sensitive SLUB caches
  2022-02-23 · Junaid Shahid <hidden>
• STALE1533d [RFC PATCH 17/47] mm: asi: Aliased direct map for local non-sensitive allocations
  2022-02-23 · Junaid Shahid <hidden>
• STALE1533d [RFC PATCH 16/47] mm: asi: Support for mapping non-sensitive pcpu chunks
  2022-02-23 · Junaid Shahid <hidden>
• STALE1533d [RFC PATCH 12/47] mm: asi: Support for global non-sensitive slab caches
  2022-02-23 · Junaid Shahid <hidden>
• STALE1533d [RFC PATCH 01/47] mm: asi: Introduce ASI core API
  2022-02-23 · Junaid Shahid <hidden>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE67d [PATCH 20/61] apparmor: Prefer IS_ERR_OR_NULL over manual NULL check
  2026-03-10 · Philipp Hahn <hidden>