linux-security-module archive · October 2026

318 messages across 50 threads, ordered by last activity .

• HOTtoday [PATCH] landlock: Move the domain layer counter out of the anonymous union
  2026-10-09 17:23 · 5 replies this month · Abel Vesa <hidden>
• DORMANTno replies [syzbot] [lsm?] WARNING in landlock_merge_ruleset
  2026-10-09 17:04 · 0 replies this month · syzbot <hidden>
• HOTtoday [PATCH net v2] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
  2026-10-09 16:13 · 1 reply this month · Joas Antonio dos Santos <hidden>
• HOTtoday [PATCH net] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
  2026-10-09 15:57 · 3 replies this month · Joas Antonio dos Santos <hidden>
• HOTtoday [PATCH net v2] calipso: update payload_len when removing the CALIPSO option
  2026-10-09 15:28 · 1 reply this month · Joas Antonio dos Santos <hidden>
• HOTtoday [PATCH] ima: bound line scan in ima_read_policy() to fix OOB read
  2026-10-09 13:37 · 1 reply this month · Fabrice Derepas <hidden>
• HOTtoday [PATCH net-next] calipso: hash the cache key, not the option start, in calipso_cache_add()
  2026-10-09 11:42 · 2 replies this month · Joas Antonio dos Santos <hidden>
• HOTtoday REVIEWED: 2 (2M) [PATCH] evm: check return values of crypto_shash functions
  2026-10-09 11:39 · 1 reply this month · Roberto Sassu <hidden>
• HOTtoday [PATCH 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
  2026-10-09 07:42 · 14 replies this month · Josef Bacik <josef@toxicpanda.com>
• HOTtoday [PATCH] keys: Check the authorization payload in process keyring searches
  2026-10-09 06:00 · 1 reply this month · Cen Zhang <hidden>
• HOTtoday [PATCH v2] keys: Protect the type name while describing a key
  2026-10-09 05:26 · 1 reply this month · Cen Zhang <hidden>
• HOTtoday [PATCH v2] keys: Avoid the owner account dereference in named keyring lookup
  2026-10-09 05:22 · 1 reply this month · Cen Zhang <hidden>
• HOTtoday [PATCH] keys: Protect the type name while describing a key
  2026-10-09 05:07 · 3 replies this month · Cen Zhang <hidden>
• HOTtoday [PATCH] keys: Avoid the owner account dereference in named keyring lookup
  2026-10-09 05:06 · 3 replies this month · Cen Zhang <hidden>
• HOTtoday [PATCH bpf-next v2 0/3] keys: Add well known IDs for fs-verity/dm-verity keys
  2026-10-08 21:57 · 8 replies this month · Andrew Halaney <hidden>
• WARM1d [PATCH 0/3] keys: Add well known IDs for fs-verity/dm-verity keys
  2026-10-08 20:15 · 4 replies this month · Andrew Halaney <hidden>
• WARM1d [RFC PATCH 0/2] keys: Address lookup_user_key() mutability
  2026-10-08 20:00 · 7 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• WARM1d [PATCH] keys: make keyring indexes independent of kernel addresses
  2026-10-08 17:28 · 2 replies this month · Kyle Zeng <hidden>
• WARM1d [PATCH net] calipso: update payload_len when removing the CALIPSO option
  2026-10-08 15:26 · 2 replies this month · Joas Antonio dos Santos <hidden>
• WARM1d [PATCH 00/27] landlock: Selftest fixes and cleanups
  2026-10-08 14:44 · 55 replies this month · Günther Noack <hidden>
• WARM1d [PATCH RFC 0/3] security: ima: support TSM measurement registers
  2026-10-08 11:11 · 6 replies this month · Yeoreum Yun <hidden>
• WARM1d [PATCH 6.6.y 0/2] apparmor: backport CVE-2026-45893, CVE-2026-46254
  2026-10-08 05:56 · 5 replies this month · Artem Dinaburg <hidden>
• WARM1d [PATCH] apparmor: avoid potential double free when remapping DFA tables
  2026-10-08 03:31 · 1 reply this month · lirongqing <hidden>
• WARM1d LANDED: 1 (1M) [PATCH net v2] cipso: adjust cached option offsets when removing CIPSO
  2026-10-08 02:30 · 4 replies this month · Daehyeon Ko <hidden>
• WARM2d [syzbot] [lsm?] general protection fault in smack_inode_permission (4)
  2026-10-07 15:23 · 1 reply this month · syzbot <hidden>
• WARM2d [PATCH v5 0/8] Landlock: Namespace and capability control
  2026-10-07 10:23 · 16 replies this month · Mickaël Salaün <mic@digikod.net>
• WARM3d [PATCH 0/6] ipe: cleanups, an audit fix and updated links
  2026-10-06 16:59 · 13 replies this month · Fan Wu <wufan@kernel.org>
• WARM3d [PATCH RFC -next 00/12] landlock: Add READ_METADATA and WRITE_METADATA access rights
  2026-10-06 15:40 · 3 replies this month · Cai Xinchen <hidden>
• WARM3d [RFC PATCH bpf-next 00/12] fs: unified VFS ancestor walk for Landlock and BPF
  2026-10-06 14:58 · 33 replies this month · Justin Suess <hidden>
• WARM3d [PATCH] landlock: Fix superblock use-after-free in release_inode()
  2026-10-06 11:08 · 1 reply this month · "Günther Noack" <gnoack@google.com>
• WARM3d [PATCH v4 0/8] Landlock: Namespace and capability control
  2026-10-06 09:57 · 19 replies this month · Mickaël Salaün <mic@digikod.net>
• WARM3d [PATCH net] cipso: adjust cached option offsets when removing CIPSO
  2026-10-05 22:38 · 2 replies this month · Daehyeon Ko <hidden>
• WARM3d REVIEWED: 1 (1M) [PATCH v2] keys/trusted_keys: reuse TPM version in option handling
  2026-10-05 21:58 · 5 replies this month · Srish Srinivasan <ssrish@linux.ibm.com>
• COOLING4d [PATCH v4 00/11] seq_buf: Add seq_buf_strlen()
  2026-10-05 16:43 · 37 replies this month · Kees Cook <kees@kernel.org>
• WARM2d REVIEWED: 8 (8M) [PATCH v5 02/12] seq_buf: Do not pop from an overflowed seq_buf
  2026-10-05 16:02 · 1 reply this month · Kees Cook <kees@kernel.org>
• COOLING4d [GIT PULL] selinux/selinux-pr-20261005
  2026-10-05 14:41 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• COOLING4d REVIEWED: 1 (1M) [PATCH v3] keys/trusted_keys: reuse TPM version in option handling
  2026-10-05 07:39 · 1 reply this month · Srish Srinivasan <ssrish@linux.ibm.com>
• COOLING4d [PATCH v3 0/2] keys: Fix ownership lifetime and accounting races
  2026-10-05 06:39 · 5 replies this month · Chengfeng Ye <hidden>
• COOLING4d [PATCH 0/2] SafeSetID: use real GID for GID policy lookups
  2026-10-04 22:06 · 5 replies this month · <hidden>
• COOLING5d [PATCH] tomoyo: Enforce connect policy in TCP Fast Open
  2026-10-04 14:20 · 1 reply this month · Matthieu Buffet <hidden>
• COOLING5d [PATCH 00/11] Convert moduleparams to seq_buf
  2026-10-04 10:51 · 1 reply this month · Kees Cook <kees@kernel.org>
• DORMANTno replies [syzbot] Monthly lsm report (Oct 2026)
  2026-10-03 04:33 · 0 replies this month · syzbot <hidden>
• COOLING6d [PATCH v6 0/8] lsm: Replace security_sb_mount with granular mount hooks
  2026-10-02 23:59 · 1 reply this month · Song Liu <song@kernel.org>
• COOLING7d REVIEWED: 1 (1M) [PATCH] keys/trusted_keys: reuse TPM version in option handling
  2026-10-02 06:59 · 2 replies this month · Srish Srinivasan <ssrish@linux.ibm.com>
• COOLING7d [PATCH v3] keys/trusted/tpm2: Validate TPM2_Create object sizes separately
  2026-10-02 03:24 · 1 reply this month · Srish Srinivasan <ssrish@linux.ibm.com>
• COOLING7d IN LINUX-NEXT [PATCH] KEYS: Fix add_key() race with keyring restriction
  2026-10-02 03:18 · 1 reply this month · <hidden>
• COOLING8d [PATCH v3] lsm,nscommon: initialize the security blob for the initial namespaces
  2026-10-01 16:38 · 1 reply this month · Stephen Smalley <stephen.smalley.work@gmail.com>
• WARM3d REVIEWED: 5 (5M) [PATCH 15/16 net-next v3] netlabel: cipso: introduce CONFIG_CIPSO to decouple IPv4 dependency
  2026-10-01 14:05 · 1 reply this month · Fernando Fernandez Mancera <hidden>
• WARM3d REVIEWED: 4 (4M) [PATCH 01/16 net-next v3] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack
  2026-10-01 14:05 · 1 reply this month · Fernando Fernandez Mancera <hidden>
• COOLING8d [PATCH] MAINTAINERS: name the wufan/ipe next branch
  2026-10-01 11:25 · 1 reply this month · Matthias Goergens <hidden>