security subsystem

Most active threads (last 7 days)

Recent patches

Latest 30 postings or standalone patches (up to 30), newest first. Counts below cover matching patches in linux-security-module touching this subsystem.

• [PATCH net] cipso: stop modifying live ip_options_rcu 2026-11-06 · Jann Horn <jannh@google.com>
• [PATCH] apparmor: fix out-of-bounds read in unix socket address audit 2026-11-06 · Henry Martin <hidden>
• [PATCH v2] lsm: don't call d_path() when current->fs is NULL 2026-11-06 · Drif Abdelmalek Mohamed Said <hidden>
• pidfd: Add task path ioctls v5 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v5 1/3] fs: Introduce task path helpers 2026-11-06
  2026-11-06 · Chen Linxuan via B4 Relay <devnull+me.black-desk.cn@kernel.org>
• [PATCH v3 2/2] KEYS: Reject keyring creation with overridden credentials 2026-11-05 · Jarkko Sakkinen <jarkko@kernel.org>
• [PATCH v3 1/2] KEYS: Return user session keyring on lookup 2026-11-05 · Jarkko Sakkinen <jarkko@kernel.org>
• mm: continue vma_flags_t conversion v1 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 13/13] security: convert VMA flag tests to use vma_flags_t 2026-11-05
  2026-11-05 · Lorenzo Stoakes (ARM) <ljs@kernel.org>
• [PATCH v6 1/4] ima: skip algorithm availability check until initramfs unpacking is finished 2026-11-05 · Danny Hu <hidden>
• [PATCH v4] KEYS: Protect pkey method checks against type removal 2026-11-05 · Yuansheng Yang <hidden>
• REVIEWED · 1 review, 1 by a maintainer [PATCH v5] security: Expand task_setscheduler LSM hook 2026-11-05 · Aaron Tomlin <atomlin@atomlin.com>
• Add offsetofp() and offsetofendp() for pointer arithmetic v1 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 2/3] treewide: Use offsetofendp() 2026-11-05
  2026-11-05 · Bence Csokas <hidden>
• Extend PKWM to support user-created wrapping keys v6 · 5 matching patches

  Entire posting: PENDING · 2 of 9 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v6 1/9] keys/trusted_keys: propagate wrapping key generation errors 2026-11-05
  • [PATCH v6 2/9] keys/trusted_keys: fix PKWM output buffer cleanup 2026-11-05
  • [PATCH v6 3/9] keys/trusted_keys: clear sensitive PKWM buffers 2026-11-05
  • [PATCH v6 6/9] pseries/plpks: fix length types for wrapping operations 2026-11-05
  • [PATCH v6 8/9] keys/trusted_keys: enable PKWM wrapping key selection by label 2026-11-05
  2026-11-05 · Srish Srinivasan <ssrish@linux.ibm.com>
• [PATCH v3] KEYS: Protect pkey method checks against type removal 2026-11-05 · Yuansheng Yang <hidden>
• KEYS: Replace assoc_array with rhashtable v5 · 2 matching patches

  Entire posting: PENDING · 2 of 3 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v5 1/3] KEYS: Introduce keyring_is_empty() 2026-11-05
  • [PATCH v5 2/3] KEYS: Replace assoc_array with rhashtable 2026-11-05
  2026-11-05 · Jarkko Sakkinen <jarkko@kernel.org>
• KEYS: Sanitize the garbage collector v3 · 6 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH v3 01/11] KEYS: Add key_gc_flush() for draining RCU callbacks 2026-11-05
  • [RFC PATCH v3 06/11] KEYS: trusted: TEE: Disable sysfs bind attributes 2026-11-05
  • [RFC PATCH v3 07/11] KEYS: trusted: TEE: Synchronize session lifetime 2026-11-05
  • [RFC PATCH v3 09/11] KEYS: Pin the backing kernel module for a key type 2026-11-05
  • [RFC PATCH v3 10/11] KEYS: Remove key_type_dead 2026-11-05
  • [RFC PATCH v3 11/11] KEYS: key_garbage_collector(): process in chunks 2026-11-05
  2026-11-05 · Jarkko Sakkinen <jarkko@kernel.org>
• cred: gather the "same uid" checks between tasks in one place v2 · 2 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 04/13] fcntl: use cred_ids_allow_sigio() 2026-11-04
  • [PATCH v2 13/13] keys: use cred_ids_allow_control() 2026-11-04
  2026-11-04 · Josef Bacik <josef@toxicpanda.com>
• memcg: dma-buf cgroup accounting and charge transfer v4 · 2 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v4 4/8] security: dma-buf: Add dma_buf_charge_task LSM hook 2026-11-04
  • [PATCH v4 5/8] security: dma-buf: Add dma_buf_charge_cgroup LSM hook 2026-11-04
  2026-11-04 · Albert Esteve <hidden>
• REVIEWED · 1 review, 0 by maintainers [PATCH] ima: hold ima_extend_list_mutex while locating the trim position 2026-11-04 · Weibin Liu <hidden>
• [PATCH v2] KEYS: Protect pkey method checks against type removal 2026-11-04 · BeaCox <hidden>
• mseal sysmap: Choose system mapping sealing at boot v2 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 4/8] mm/mseal: Move MSEAL_SYSTEM_MAPPINGS to mm/Kconfig 2026-11-03
  2026-11-03 · Chris Down <chris@chrisdown.name>
• lockdown: fix the securityfs interface and add tests v1 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH -next 3/9] lockdown: bound the status string with scnprintf 2026-11-03
  2026-11-03 · Cai Xinchen <hidden>
• [PATCH -next 4/9] lockdown: select SECURITYFS 2026-11-03 · Cai Xinchen <hidden>
• [PATCH -next 7/9] lockdown: move lockdown_reasons next to its only user 2026-11-03 · Cai Xinchen <hidden>
• [PATCH -next 2/9] lockdown: remove useless decrement operation 2026-11-03 · Cai Xinchen <hidden>
• [PATCH -next 9/9] selftests/lsm: add lockdown securityfs test 2026-11-03 · Cai Xinchen <hidden>
• [PATCH -next 1/9] lockdown: Add break in lockdown_write 2026-11-03 · Cai Xinchen <hidden>
• [PATCH -next 5/9] lsm: remove unused lockdown audit data 2026-11-03 · Cai Xinchen <hidden>
• [PATCH -next 6/9] lockdown: drop an unused include and simplify secfs init 2026-11-03 · Cai Xinchen <hidden>
• [PATCH] KEYS: Protect pkey method checks against type removal 2026-11-03 · BeaCox <hidden>
• [PATCH v2] ima: initialize the real inode attributes of the iint cache 2026-11-03 · Cai Xinchen <hidden>