extended verification module (evm) · Supported

Maintainers

• M Mimi Zohar <zohar@linux.ibm.com>
• M Roberto Sassu <roberto.sassu@huawei.com>

Paths

• F security/integrity/
• F security/integrity/evm/

Last 30 days

Most active threads (last 7 days)

• DORMANTno replies [PATCH] ima: fix out-of-bounds read in xattr_verify()
  2026-07-30 02:04 · 0 replies in 7d · Lincoln Wallace <hidden>
• WARM2d [PATCH v2 0/3] integrity: Return error codes in audit messages
  2026-07-27 22:22 · 3 replies in 7d · Frederick Lawler <hidden>
• WARM2d [PATCH -next,v3] ima: add cond_resched() in ima_calc_file_hash_tfm loop
  2026-07-28 12:36 · 0 replies in 7d · Gaosheng Cui <hidden>
• HOTtoday [PATCH v5 0/2] Add Apple T2 NHI device links
  2026-07-27 21:18 · 1 reply in 7d · Atharva Tiwari <hidden>
• WARM3d [PATCH v4 0/2] Add Apple T2 NHI device links
  2026-07-24 16:47 · 1 reply in 7d · Atharva Tiwari <hidden>

Active reviewers (last 30 days)

• Paul Moore <paul@paul-moore.com>
  1 attestation (1 Suggested-by) · last on 2026-07-08

Recent patches

Most-recent 30 patches in this subsystem on linux-security-module (capped at 30), ordered by date desc.

• DORMANTno replies [PATCH] ima: fix out-of-bounds read in xattr_verify()
  2026-07-30 · Lincoln Wallace <hidden>
• WARM2d [PATCH -next,v3] ima: add cond_resched() in ima_calc_file_hash_tfm loop
  2026-07-28 · Gaosheng Cui <hidden>
• DORMANTno replies [PATCH v2 3/3] integrity: Report error code in integrity_audit_message() call sites
  2026-07-27 · Frederick Lawler <hidden>
• WARM2d [PATCH v2 2/3] integrity: Remove integrity_audit_msg()
  2026-07-27 · Frederick Lawler <hidden>
• WARM2d [PATCH v2 1/3] integrity: Replace all uses of integrity_audit_msg() with integrity_audit_message()
  2026-07-27 · Frederick Lawler <hidden>
• HOTtoday [PATCH v5 1/2] treewide: Add a flag to detect the Apple T2 chip
  2026-07-27 · Atharva Tiwari <hidden>
• WARM3d [PATCH v4 1/2] treewide: Add a flag to detect the Apple T2 chip
  2026-07-24 · Atharva Tiwari <hidden>
• COOLING9d [PATCH v3 1/2] treewide: Add a flag to detect the Apple T2 chip
  2026-07-21 · Atharva Tiwari <hidden>
• COOLING9d [PATCH v2 1/2] treewide: Add a flag to detect the Apple T2 chip
  2026-07-21 · Atharva Tiwari <hidden>
• COOLING11d [PATCH 1/2] treewide: Add a flag to detect the Apple T2 chip
  2026-07-19 · Atharva Tiwari <hidden>
• COOLING5d [PATCH] ima: Report errno for failed hash collection to audit
  2026-07-16 · Frederick Lawler <hidden>
• COOLING14d [PATCH -next,v2] ima: add cond_resched() in ima_calc_file_hash_tfm loop
  2026-07-14 · Gaosheng Cui <hidden>
• COLD16d [PATCH -next] ima: add cond_resched() in ima_calc_file_hash_tfm loop
  2026-07-13 · Gaosheng Cui <hidden>
• COOLING6d [PATCH v5 bpf-next 1/3] security: rework inode_init_security xattr handling
  2026-07-08 · David Windsor <hidden>
• COLD28d [PATCH v4 bpf-next 1/3] security: pass inode_init_security xattrs via struct lsm_xattrs
  2026-06-30 · David Windsor <hidden>
• COLD34d [PATCH bpf-next v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
  2026-06-18 · David Windsor <hidden>
• COLD52d [PATCH v7 11/12] ima: Support staging and deleting N measurements records
  2026-06-05 · Roberto Sassu <hidden>
• COLD52d [PATCH v7 10/12] ima: Add support for flushing the hash table when staging measurements
  2026-06-05 · Roberto Sassu <hidden>
• COLD52d REVIEWED: 1 (1M) [PATCH v7 09/12] ima: Add support for staging measurements with prompt
  2026-06-05 · Roberto Sassu <hidden>
• COLD52d REVIEWED: 5 (5M) [PATCH v7 08/12] ima: Introduce ima_dump_measurement()
  2026-06-05 · Roberto Sassu <hidden>
• COLD52d REVIEWED: 5 (5M) [PATCH v7 07/12] ima: Use snprintf() in create_securityfs_measurement_lists
  2026-06-05 · Roberto Sassu <hidden>
• COLD52d [PATCH v7 06/12] ima: Mediate open/release method of the measurements list
  2026-06-05 · Roberto Sassu <hidden>
• COLD52d REVIEWED: 5 (5M) [PATCH v7 05/12] ima: Introduce _ima_measurements_start() and _ima_measurements_next()
  2026-06-05 · Roberto Sassu <hidden>
• COLD52d [PATCH v7 04/12] ima: Introduce per binary measurements list type binary_runtime_size value
  2026-06-05 · Roberto Sassu <hidden>
• COLD52d REVIEWED: 5 (5M) [PATCH v7 03/12] ima: Introduce per binary measurements list type ima_num_records counter
  2026-06-05 · Roberto Sassu <hidden>
• COLD52d REVIEWED: 5 (5M) [PATCH v7 02/12] ima: Replace static htable queue with dynamically allocated array
  2026-06-05 · Roberto Sassu <hidden>
• COLD52d [PATCH v7 01/12] ima: Remove ima_h_table structure
  2026-06-05 · Roberto Sassu <hidden>
• COLD27d [PATCH v6 3/4] security: ima: rename boot_aggregate when ima is initialised at late_sync
  2026-06-05 · Yeoreum Yun <hidden>
• COLD27d REVIEWED: 5 (5M) [PATCH v6 2/4] security: ima: introduce IMA_INIT_LATE_SYNC option
  2026-06-05 · Yeoreum Yun <hidden>
• COLD55d [PATCH v6 11/12] ima: Support staging and deleting N measurements records
  2026-06-02 · Roberto Sassu <hidden>

Needs attention (review trailers in, no pickup)

Patches with review trailers that haven't landed in mainline and haven't been Acked by a maintainer. Oldest first.

• STALE175d REVIEWED: 4 (4M) [PATCH v4] ima: Fallback to ctime check for FS without kstat.change_cookie
  2026-01-29 · Frederick Lawler <hidden> · 1 Reviewed-by
• STALE153d REVIEWED: 8 (8M) [PATCH 1/2] ima: efi: Drop unnecessary check for CONFIG_MODULE_SIG/CONFIG_KEXEC_SIG
  2026-02-26 · Thomas Weißschuh <linux@weissschuh.net> · 3 Reviewed-by
• DORMANTno replies REVIEWED: 5 (5M) FAILED: Patch "ima: verify the previous kernel's IMA buffer lies in addressable RAM" failed to apply to 6.12-stable tree
  2026-03-01 · Sasha Levin <sashal@kernel.org> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 5 (5M) FAILED: Patch "ima: verify the previous kernel's IMA buffer lies in addressable RAM" failed to apply to 6.6-stable tree
  2026-03-01 · Sasha Levin <sashal@kernel.org> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 5 (5M) FAILED: Patch "ima: verify the previous kernel's IMA buffer lies in addressable RAM" failed to apply to 6.1-stable tree
  2026-03-01 · Sasha Levin <sashal@kernel.org> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 5 (5M) FAILED: Patch "ima: verify the previous kernel's IMA buffer lies in addressable RAM" failed to apply to 5.15-stable tree
  2026-03-01 · Sasha Levin <sashal@kernel.org> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 5 (5M) FAILED: Patch "ima: verify the previous kernel's IMA buffer lies in addressable RAM" failed to apply to 5.10-stable tree
  2026-03-01 · Sasha Levin <sashal@kernel.org> · 1 Reviewed-by
• STALE147d REVIEWED: 1 (1M) [PATCH v2 4/8] module: Give MODULE_SIG_STRING a more descriptive name
  2026-03-05 · Thomas Weißschuh <hidden> · 1 Reviewed-by
• STALE125d REVIEWED: 1 (1M) [PATCH v3 4/8] module: Give MODULE_SIG_STRING a more descriptive name
  2026-03-05 · Thomas Weißschuh <hidden> · 1 Reviewed-by
• STALE135d REVIEWED: 5 (5M) [PATCH v3 1/2] EVM: add comment describing why ino field is still unsigned long
  2026-03-16 · Jeff Layton <jlayton@kernel.org> · 1 Reviewed-by

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE174d [PATCH v3 1/3] ima: make ima event log trimming configurable
  2026-01-06 · steven chen <hidden>
• STALE174d [PATCH v3 3/3] ima: add new critical data record to measure log trimming
  2026-01-06 · steven chen <hidden>
• DORMANTno replies [PATCH] efi: Mark UEFI skip cert quirks list as __initconst
  2026-01-21 · Thomas Weißschuh <hidden>
• STALE173d [PATCH v5 1/3] ima: Unify vfs_getattr_nosec() stat comparisons under helper function
  2026-01-30 · Frederick Lawler <hidden>
• STALE174d [PATCH v4 1/3] ima: make ima event log trimming configurable
  2026-02-05 · steven chen <hidden>
• STALE174d [PATCH v4 2/3] ima: trim N IMA event log records
  2026-02-05 · steven chen <hidden>
• DORMANTno replies [PATCH v4 3/3] ima: add new critical data record to measure log trim
  2026-02-05 · steven chen <hidden>
• STALE167d [PATCH v6 1/3] ima: Unify vfs_getattr_nosec() stat comparisons under helper function
  2026-02-09 · Frederick Lawler <hidden>
• STALE167d [PATCH v6 2/3] ima: Make integrity_inode_attrs_changed() call into VFS
  2026-02-09 · Frederick Lawler <hidden>
• DORMANTno replies [PATCH v2] ima: Define and use a digest_size field in the ima_algo_desc structure
  2026-02-27 · Roberto Sassu <hidden>