security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Most active threads (last 7 days)

• HOTtoday [PATCH 6.6 0000/1193] 6.6.158-rc1 review
  2026-09-30 19:31 · 6 replies in 7d · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday [PATCH 5.15 000/752] 5.15.222-rc1 review
  2026-09-30 18:12 · 4 replies in 7d · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday [PATCH 6.1 000/982] 6.1.189-rc1 review
  2026-09-30 16:30 · 4 replies in 7d · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• WARM2d FAILED: patch "[PATCH] landlock: Work around gcc-16 -Wuninitialized warning" failed to apply to 7.2-stable tree
  2026-09-29 18:29 · 6 replies in 7d · <gregkh@linuxfoundation.org>
• HOTtoday [PATCH 6.12 000/877] 6.12.112-rc1 review
  2026-09-30 17:12 · 2 replies in 7d · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday [PATCH 5.10 000/595] 5.10.271-rc1 review
  2026-09-30 15:50 · 2 replies in 7d · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• WARM1d FAILED: patch "[PATCH] ipe: fix use-after-free when auditing a newly loaded policy" failed to apply to 6.12-stable tree
  2026-09-29 12:46 · 1 reply in 7d · <gregkh@linuxfoundation.org>
• WARM1d [PATCH v3 2/2] keys: Serialize ownership transfers with key accounting
  2026-09-27 16:26 · 0 replies in 7d · Chengfeng Ye <hidden>
• WARM1d [PATCH v3 1/2] keys: Protect key_user lifetime during ownership changes
  2026-09-27 16:25 · 0 replies in 7d · Chengfeng Ye <hidden>
• COOLING6d Linux 7.2.8
  2026-09-25 14:46 · 1 reply in 7d · Greg Kroah-Hartman <gregkh@linuxfoundation.org>

Active reviewers (last 30 days)

• Jarkko Sakkinen <jarkko@kernel.org>
  37 attestations (27 Reviewed-by, 10 Tested-by) · last on 2026-09-30
• Günther Noack <hidden>
  16 attestations (8 Reviewed-by, 8 Tested-by) · last on 2026-09-17
• Christian Brauner <brauner@kernel.org>
  13 attestations (13 Suggested-by) · last on 2026-09-30
• Mickaël Salaün <mic@digikod.net>
  13 attestations (13 Suggested-by) · last on 2026-09-30
• R Nageswara Sastry <hidden>
  8 attestations (8 Tested-by) · last on 2026-09-22
• <hidden>
  7 attestations (7 Reported-by) · last on 2026-09-12
• Serge Hallyn <serge@hallyn.com>
  6 attestations (6 Reviewed-by) · last on 2026-09-12
• William Roberts <hidden>
  6 attestations (3 Reviewed-by, 3 Tested-by) · last on 2026-09-12
• Kamlesh Kumar <hidden>
  5 attestations (5 Tested-by) · last on 2026-09-30
• Tingmao Wang <hidden>
  5 attestations (2 Reported-by, 3 Reviewed-by) · last on 2026-09-30

Recent patches

Most-recent 30 patches in this subsystem on stable (capped at 30), ordered by date desc.

• HOTtoday [PATCH 6.6 0955/1193] apparmor: Fix 8-byte alignment for initial dfa blob streams
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday [PATCH 6.6 0954/1193] apparmor: Fix memory leak in unpack_profile()
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday [PATCH 6.6 0953/1193] apparmor: free the allocated pdb objects
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday REVIEWED: 5 (5M) [PATCH 6.6 0780/1193] keys: fix lost wakeup when reaping a dead key type
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday REVIEWED: 1 (0M) [PATCH 6.6 0049/1193] integrity: Check for NULL returned by asymmetric_key_public_key
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday [PATCH 6.6 0008/1193] ima: return error early if file xattr cannot be changed
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday REVIEWED: 5 (5M) [PATCH 5.15 485/752] keys: fix lost wakeup when reaping a dead key type
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday [PATCH 5.15 426/752] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday REVIEWED: 1 (0M) [PATCH 5.15 029/752] integrity: Check for NULL returned by asymmetric_key_public_key
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday [PATCH 5.15 003/752] ima: return error early if file xattr cannot be changed
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday REVIEWED: 5 (5M) [PATCH 6.12 091/877] keys: fix lost wakeup when reaping a dead key type
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday [PATCH 6.12 003/877] landlock: Fix TCP Fast Open connection bypass
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday REVIEWED: 5 (5M) [PATCH 6.1 652/982] keys: fix lost wakeup when reaping a dead key type
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday REVIEWED: 1 (0M) [PATCH 6.1 576/982] landlock: Fix handling of disconnected directories
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday REVIEWED: 1 (0M) [PATCH 6.1 041/982] integrity: Check for NULL returned by asymmetric_key_public_key
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday [PATCH 6.1 004/982] ima: return error early if file xattr cannot be changed
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday REVIEWED: 5 (5M) [PATCH 5.10 393/595] keys: fix lost wakeup when reaping a dead key type
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• HOTtoday [PATCH 5.10 003/595] ima: return error early if file xattr cannot be changed
  2026-09-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• DORMANTno replies [PATCH 7.2.y v2] landlock: Work around gcc-16 -Wuninitialized warning
  2026-09-29 · Mickaël Salaün <mic@digikod.net>
• WARM2d [PATCH 7.2.y 5/5] landlock: Work around gcc-16 -Wuninitialized warning
  2026-09-29 · Sasha Levin <sashal@kernel.org>
• WARM2d [PATCH 7.2.y 4/5] landlock: Split denial logging from audit into common framework
  2026-09-29 · Sasha Levin <sashal@kernel.org>
• WARM2d [PATCH 7.2.y 3/5] landlock: Split struct landlock_domain from struct landlock_ruleset
  2026-09-29 · Sasha Levin <sashal@kernel.org>
• WARM2d [PATCH 7.2.y 2/5] landlock: Move domain query functions to domain.c
  2026-09-29 · Sasha Levin <sashal@kernel.org>
• WARM2d REVIEWED: 1 (0M) [PATCH 7.2.y 1/5] landlock: Prepare ruleset and domain type split
  2026-09-29 · Sasha Levin <sashal@kernel.org>
• WARM1d [PATCH 6.12.y] ipe: fix use-after-free when auditing a newly loaded policy
  2026-09-29 · Sasha Levin <sashal@kernel.org>
• WARM2d FAILED: patch "[PATCH] landlock: Work around gcc-16 -Wuninitialized warning" failed to apply to 7.2-stable tree
  2026-09-29 · <gregkh@linuxfoundation.org>
• WARM1d FAILED: patch "[PATCH] ipe: fix use-after-free when auditing a newly loaded policy" failed to apply to 6.12-stable tree
  2026-09-29 · <gregkh@linuxfoundation.org>
• WARM1d [PATCH v3 2/2] keys: Serialize ownership transfers with key accounting
  2026-09-27 · Chengfeng Ye <hidden>
• WARM1d [PATCH v3 1/2] keys: Protect key_user lifetime during ownership changes
  2026-09-27 · Chengfeng Ye <hidden>
• DORMANTno replies Re: Linux 7.2.8
  2026-09-25 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>

Needs attention (review trailers in, no pickup)

Patches with review trailers that haven't landed in mainline and haven't been Acked by a maintainer. Oldest first.

• STALE182d REVIEWED: 3 (1M) [PATCH v6.1] apparmor: fix unprivileged local user can do privileged policy management
  2026-04-02 · Keerthana K <hidden> · 2 Reviewed-by, 1 Tested-by
• DORMANTno replies REVIEWED: 3 (1M) [PATCH v5.10-v5.15] apparmor: fix unprivileged local user can do privileged policy management
  2026-04-02 · Keerthana K <hidden> · 2 Reviewed-by, 1 Tested-by
• STALE171d REVIEWED: 3 (1M) [PATCH 05/11] apparmor: fix side-effect bug in match_char() macro usage
  2026-04-13 · John Johansen <john.johansen@canonical.com> · 2 Reviewed-by, 1 Tested-by
• STALE171d REVIEWED: 3 (1M) [PATCH 07/11] apparmor: Fix double free of ns_name in aa_replace_profiles()
  2026-04-13 · John Johansen <john.johansen@canonical.com> · 2 Reviewed-by, 1 Tested-by
• STALE171d REVIEWED: 3 (1M) [PATCH 03/11] apparmor: replace recursive profile removal with iterative approach
  2026-04-13 · John Johansen <john.johansen@canonical.com> · 2 Reviewed-by, 1 Tested-by
• STALE171d REVIEWED: 2 (0M) [PATCH 04/11] apparmor: fix: limit the number of levels of policy namespaces
  2026-04-13 · John Johansen <john.johansen@canonical.com> · 2 Reviewed-by
• STALE171d REVIEWED: 3 (1M) [PATCH 08/11] apparmor: fix unprivileged local user can do privileged policy management
  2026-04-13 · John Johansen <john.johansen@canonical.com> · 2 Reviewed-by, 1 Tested-by
• STALE171d REVIEWED: 3 (1M) [PATCH 09/11] apparmor: fix differential encoding verification
  2026-04-13 · John Johansen <john.johansen@canonical.com> · 2 Reviewed-by, 1 Tested-by
• STALE171d REVIEWED: 4 (1M) [PATCH 10/11] apparmor: fix race on rawdata dereference
  2026-04-13 · John Johansen <john.johansen@canonical.com> · 3 Reviewed-by, 1 Tested-by
• STALE171d REVIEWED: 3 (1M) [PATCH 11/11] apparmor: fix race between freeing data and fs accessing it
  2026-04-13 · John Johansen <john.johansen@canonical.com> · 3 Reviewed-by

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE176d [PATCH 6.12 088/265] ima: kexec: silence RCU list traversal warning
  2026-03-12 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• DORMANTno replies Re: Linux 6.12.77
  2026-03-13 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE202d Re: Linux 6.18.18
  2026-03-13 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE202d Re: Linux 6.19.8
  2026-03-13 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE181d [PATCH 6.12.y 1/9] landlock: Optimize file path walks and prepare for audit support
  2026-03-24 · Harshit Mogalapalli <hidden>
• DORMANTno replies Re: Linux 6.1.167
  2026-03-25 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• DORMANTno replies Re: Linux 6.6.130
  2026-03-25 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE190d Re: Linux 6.12.78
  2026-03-25 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE190d Re: Linux 6.18.20
  2026-03-25 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE190d Re: Linux 6.19.10
  2026-03-25 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>