security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Most active threads (last 7 days)

• WARM3d [PATCH v3 0/3] Bring includes in linux/kmod.h up to date
  2026-09-11 14:47 · 1 reply in 7d · Petr Pavlu <petr.pavlu@suse.com>
• WARM2d [PATCH 00/13 net-next] Allow compiling an IPv6-only kernel network stack
  2026-09-10 14:50 · 1 reply in 7d · Fernando Fernandez Mancera <hidden>

Active reviewers (last 30 days)

• Jarkko Sakkinen <jarkko@kernel.org>
  1 attestation (1 Reviewed-by) · last on 2026-08-24

Recent patches

Most-recent 30 patches in this subsystem on netdev (capped at 30), ordered by date desc.

• WARM3d [PATCH v3 1/3] umh, treewide: Explicitly include linux/umh.h where needed
  2026-09-11 · Petr Pavlu <petr.pavlu@suse.com>
• WARM2d [PATCH 01/13 net-next] net: ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack
  2026-09-10 · Fernando Fernandez Mancera <hidden>
• COOLING14d [PATCH 3/6] landlock: Add MPTCP bind and connect access rights
  2026-08-30 · Günther Noack <hidden>
• COLD17d REVIEWED: 5 (5M) [PATCH net v8 08/12] keys: Add refcounting to user-defined key type payload
  2026-08-24 · David Howells <dhowells@redhat.com>
• COLD24d [PATCH net v7 07/11] keys: Add refcounting to user-defined key type payload
  2026-08-12 · David Howells <dhowells@redhat.com>
• COLD27d [PATCH v2 08/13] security/keys: implement wipe op for trusted and encrypted keys
  2026-08-11 · Jan Sebastian Götte <hidden>
• COLD27d [PATCH v2 07/13] security/keys: implement wipe op for big_key
  2026-08-11 · Jan Sebastian Götte <hidden>
• COLD27d [PATCH v2 06/13] security/keys: implement wipe op for user-type keys
  2026-08-11 · Jan Sebastian Götte <hidden>
• COLD27d [PATCH v2 05/13] security/keys: wipe key payloads before kdump
  2026-08-11 · Jan Sebastian Götte <hidden>
• COLD27d [PATCH net v6 06/10] keys: Add refcounting to user-defined key type payload
  2026-08-04 · David Howells <dhowells@redhat.com>
• COLD35d [PATCH net v5 06/10] keys: Add refcounting to user-defined key type payload
  2026-07-29 · David Howells <dhowells@redhat.com>
• COLD47d [PATCH net v4 5/9] keys: Add refcounting to user-defined key type payload
  2026-07-23 · David Howells <dhowells@redhat.com>
• COLD49d [PATCH v2 1/3] umh, treewide: Explicitly include linux/umh.h where needed
  2026-07-21 · Petr Pavlu <petr.pavlu@suse.com>
• COLD53d [PATCH net v3 10/14] keys: Add refcounting to user-defined key type payload
  2026-07-13 · David Howells <dhowells@redhat.com>
• STALE63d [PATCH net v2 12/16] keys: Add refcounting to user-defined key type payload
  2026-07-10 · David Howells <dhowells@redhat.com>
• STALE66d [PATCH 1/2] umh, treewide: Explicitly include linux/umh.h where needed
  2026-07-08 · Petr Pavlu <petr.pavlu@suse.com>
• COLD53d [RFC PATCH 3/3] coredump, net: remove `SOCK_COREDUMP`
  2026-07-03 · John Ericson <hidden>
• STALE66d [PATCH net 4/4] rxrpc: Fix CHALLENGE packet overqueuing and simplify RESPONSE generation
  2026-07-02 · David Howells <dhowells@redhat.com>
• STALE74d [PATCH v2 1/2] landlock: fix TCP Fast Open connection bypass
  2026-07-01 · Matthieu Buffet <hidden>
• DORMANTno replies Re: [PATCH] tomoyo: Enforce connect policy in TCP Fast Open
  2026-06-27 · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• STALE79d [PATCH] tomoyo: Enforce connect policy in TCP Fast Open
  2026-06-19 · Matthieu Buffet <hidden>
• STALE74d IN LINUX-NEXT [RFC PATCH 1/2] landlock: fix TCP Fast Open connection bypass
  2026-06-17 · Matthieu Buffet <hidden>
• COLD17d Re: [PATCH v5 2/6] landlock: Add UDP send+connect access control
  2026-06-13 · Mickaël Salaün <mic@digikod.net>
• COLD17d [PATCH v5 2/6] landlock: Add UDP send+connect access control
  2026-06-11 · Matthieu Buffet <hidden>
• COLD17d [PATCH v5 1/6] landlock: Add UDP bind() access control
  2026-06-11 · Matthieu Buffet <hidden>
• STALE95d [PATCH 08/11] params: Convert generic kernel_param_ops .get helpers to seq_buf
  2026-05-21 · Kees Cook <kees@kernel.org>
• STALE95d [PATCH 09/11] treewide: Convert custom kernel_param_ops .get callbacks to seq_buf via cocci
  2026-05-21 · Kees Cook <kees@kernel.org>
• STALE95d [PATCH 04/11] treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS
  2026-05-21 · Kees Cook <kees@kernel.org>
• STALE114d Re: [RFC PATCH v4 01/19] landlock: Support socket access-control
  2026-05-08 · Mickaël Salaün <mic@digikod.net>
• STALE95d [PATCH v4 1/7] landlock: Add UDP bind() access control
  2026-05-02 · Matthieu Buffet <hidden>

Needs attention (review trailers in, no pickup)

Patches with review trailers that haven't landed in mainline and haven't been Acked by a maintainer. Oldest first.

• COLD17d REVIEWED: 5 (5M) [PATCH net v8 08/12] keys: Add refcounting to user-defined key type payload
  2026-08-24 · David Howells <dhowells@redhat.com> · 1 Reviewed-by

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE151d [PATCH 20/61] apparmor: Prefer IS_ERR_OR_NULL over manual NULL check
  2026-03-10 · Philipp Hahn <hidden>
• STALE95d [PATCH v4 1/7] landlock: Add UDP bind() access control
  2026-05-02 · Matthieu Buffet <hidden>
• COLD17d [PATCH v5 1/6] landlock: Add UDP bind() access control
  2026-06-11 · Matthieu Buffet <hidden>
• COLD17d Re: [PATCH v5 2/6] landlock: Add UDP send+connect access control
  2026-06-13 · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies Re: [PATCH] tomoyo: Enforce connect policy in TCP Fast Open
  2026-06-27 · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• COLD53d [PATCH net v3 10/14] keys: Add refcounting to user-defined key type payload
  2026-07-13 · David Howells <dhowells@redhat.com>
• COLD49d [PATCH v2 1/3] umh, treewide: Explicitly include linux/umh.h where needed
  2026-07-21 · Petr Pavlu <petr.pavlu@suse.com>
• COLD27d [PATCH net v6 06/10] keys: Add refcounting to user-defined key type payload
  2026-08-04 · David Howells <dhowells@redhat.com>
• COLD27d [PATCH v2 05/13] security/keys: wipe key payloads before kdump
  2026-08-11 · Jan Sebastian Götte <hidden>
• COLD27d [PATCH v2 06/13] security/keys: implement wipe op for user-type keys
  2026-08-11 · Jan Sebastian Götte <hidden>