security subsystem

Most active threads (last 7 days)

Recent patches

Latest 30 postings or standalone patches (up to 30), newest first. Counts below cover matching patches in netdev touching this subsystem.

• Add offsetofp() and offsetofendp() for pointer arithmetic v1 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 2/3] treewide: Use offsetofendp() 2026-11-05
  2026-11-05 · Bence Csokas <hidden>
• KEYS: Sanitize the garbage collector v3 · 6 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH v3 01/11] KEYS: Add key_gc_flush() for draining RCU callbacks 2026-11-05
  • [RFC PATCH v3 06/11] KEYS: trusted: TEE: Disable sysfs bind attributes 2026-11-05
  • [RFC PATCH v3 07/11] KEYS: trusted: TEE: Synchronize session lifetime 2026-11-05
  • [RFC PATCH v3 09/11] KEYS: Pin the backing kernel module for a key type 2026-11-05
  • [RFC PATCH v3 10/11] KEYS: Remove key_type_dead 2026-11-05
  • [RFC PATCH v3 11/11] KEYS: key_garbage_collector(): process in chunks 2026-11-05
  2026-11-05 · Jarkko Sakkinen <jarkko@kernel.org>
• ns: fixes for the namespace LSM hooks v2 · 3 matching patches

  Entire posting: PENDING · 3 of 7 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 1/7] lsm: always call the namespace_free hook 2026-10-29
  • [PATCH v2 4/7] ns: allocate the namespace id before the namespace_init hook 2026-10-29
  • [PATCH v2 6/7] lsm: fix the security_namespace_init() kernel-doc 2026-10-29
  2026-10-29 · Christian Brauner <brauner@kernel.org>
• userns: per-namespace capability bounding set and opt-in netns loopback v1 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 2/8] userns: introduce capability bounding set for user namespaces 2026-10-28
  2026-10-28 · Hallgrimur H. Gunnarsson <hidden>
• ns: fixes for the namespace LSM hooks v1 · 3 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 1/8] lsm: always call the namespace_free hook 2026-10-26
  • [PATCH 4/8] landlock: pass the namespace id to log to check_ns_type() 2026-10-26
  • [PATCH 7/8] lsm: fix the security_namespace_init() kernel-doc 2026-10-26
  2026-10-26 · Christian Brauner <brauner@kernel.org>
• UUID and GUID user and group ids (*_r system calls) v2 · 3 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH v2 09/41] uidgid: let kuid_t and kgid_t hold a UUID or a GUID 2026-10-21
  • [RFC PATCH v2 12/41] keys: name per-user keyrings of UUID and GUID users by the whole uid 2026-10-21
  • [RFC PATCH v2 27/41] audit: log UUID and GUID ids in full 2026-10-21
  2026-10-21 · Jan Koester <hidden>
• UUID and GUID user and group ids (*_r system calls) rfc · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH 09/41] uidgid: let kuid_t and kgid_t hold a UUID or a GUID 2026-10-18
  2026-10-18 · Jan Koester <hidden>
• Allow compiling an IPv6-only kernel network stack v3 · 2 matching patches

  Entire posting: PENDING · 2 of 16 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 01/16 net-next v3] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack 2026-09-30
  • [PATCH 15/16 net-next v3] netlabel: cipso: introduce CONFIG_CIPSO to decouple IPv4 dependency 2026-09-30
  2026-09-30 · Fernando Fernandez Mancera <hidden>
• Allow compiling an IPv6-only kernel network stack v2 · 2 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 01/16 net-next v2] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack 2026-09-28
  • [PATCH 15/16 net-next v2] netlabel: cipso: introduce CONFIG_CIPSO to decouple IPv4 dependency 2026-09-28
  2026-09-28 · Fernando Fernandez Mancera <hidden>
• Bring includes in linux/kmod.h up to date v3 · 1 matching patch

  Entire posting: PENDING · 2 of 3 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 1/3] umh, treewide: Explicitly include linux/umh.h where needed 2026-09-11
  2026-09-11 · Petr Pavlu <petr.pavlu@suse.com>
• Allow compiling an IPv6-only kernel network stack v1 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 01/13 net-next] net: ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack 2026-09-10
  2026-09-10 · Fernando Fernandez Mancera <hidden>
• landlock: Support MPTCP bind and connect restrictions v1 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 3/6] landlock: Add MPTCP bind and connect access rights 2026-08-30
  2026-08-30 · Günther Noack <hidden>
• rxrpc: Fix CHALLENGE packet handling v8 · 1 matching patch

  Entire posting: PENDING · 1 of 12 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH net v8 08/12] keys: Add refcounting to user-defined key type payload 2026-08-24
  2026-08-24 · David Howells <dhowells@redhat.com>
• rxrpc: Fix CHALLENGE packet handling v7 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH net v7 07/11] keys: Add refcounting to user-defined key type payload 2026-08-12
  2026-08-12 · David Howells <dhowells@redhat.com>
• CRASH_WIPE_SECRETS: Wipe secrets before kdump (was: CRASH_ZEROIZE) v2 · 4 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 05/13] security/keys: wipe key payloads before kdump 2026-08-11
  • [PATCH v2 06/13] security/keys: implement wipe op for user-type keys 2026-08-11
  • [PATCH v2 07/13] security/keys: implement wipe op for big_key 2026-08-11
  • [PATCH v2 08/13] security/keys: implement wipe op for trusted and encrypted keys 2026-08-11
  2026-08-11 · Jan Sebastian Götte <hidden>
• rxrpc: Fix CHALLENGE packet handling v6 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH net v6 06/10] keys: Add refcounting to user-defined key type payload 2026-08-04
  2026-08-04 · David Howells <dhowells@redhat.com>
• rxrpc: Fix CHALLENGE packet handling v5 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH net v5 06/10] keys: Add refcounting to user-defined key type payload 2026-07-29
  2026-07-29 · David Howells <dhowells@redhat.com>
• rxrpc: Fix CHALLENGE packet handling v4 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH net v4 5/9] keys: Add refcounting to user-defined key type payload 2026-07-23
  2026-07-23 · David Howells <dhowells@redhat.com>
• Bring includes in linux/kmod.h up to date v2 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 1/3] umh, treewide: Explicitly include linux/umh.h where needed 2026-07-21
  2026-07-21 · Petr Pavlu <petr.pavlu@suse.com>
• rxrpc: Fix CHALLENGE packet handling v3 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH net v3 10/14] keys: Add refcounting to user-defined key type payload 2026-07-13
  2026-07-13 · David Howells <dhowells@redhat.com>
• rxrpc: Fix CHALLENGE packet handling v2 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH net v2 12/16] keys: Add refcounting to user-defined key type payload 2026-07-10
  2026-07-10 · David Howells <dhowells@redhat.com>
• Bring includes in linux/kmod.h up to date v1 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 1/2] umh, treewide: Explicitly include linux/umh.h where needed 2026-07-08
  2026-07-08 · Petr Pavlu <petr.pavlu@suse.com>
• coredump, net: fix layer violation with direct connection rfc · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH 3/3] coredump, net: remove `SOCK_COREDUMP` 2026-07-03
  2026-07-03 · John Ericson <hidden>
• rxrpc: Fix CHALLENGE packet handling v1 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH net 4/4] rxrpc: Fix CHALLENGE packet overqueuing and simplify RESPONSE generation 2026-07-02
  2026-07-02 · David Howells <dhowells@redhat.com>
• LANDED [PATCH v2 1/2] landlock: fix TCP Fast Open connection bypass 2026-07-01 · Matthieu Buffet <hidden>
• [PATCH] tomoyo: Enforce connect policy in TCP Fast Open 2026-06-19 · Matthieu Buffet <hidden>
• LANDED [RFC PATCH 1/2] landlock: fix TCP Fast Open connection bypass 2026-06-17 · Matthieu Buffet <hidden>
• landlock: Add UDP access control support v5 · 2 matching patches

  Entire posting: LANDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v5 1/6] landlock: Add UDP bind() access control 2026-06-11
  • [PATCH v5 2/6] landlock: Add UDP send+connect access control 2026-06-11
  2026-06-11 · Matthieu Buffet <hidden>
• Convert moduleparams to seq_buf v1 · 3 matching patches

  Entire posting: PENDING · 1 of 11 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 04/11] treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS 2026-05-21
  • [PATCH 08/11] params: Convert generic kernel_param_ops .get helpers to seq_buf 2026-05-21
  • [PATCH 09/11] treewide: Convert custom kernel_param_ops .get callbacks to seq_buf via cocci 2026-05-21
  2026-05-21 · Kees Cook <kees@kernel.org>
• landlock: Add UDP access control support v4 · 3 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v4 1/7] landlock: Add UDP bind() access control 2026-05-02
  • [PATCH v4 2/7] landlock: Add UDP connect() access control 2026-05-02
  • [PATCH v4 3/7] landlock: Add UDP send access control 2026-05-02
  2026-05-02 · Matthieu Buffet <hidden>