Skip to content

Kernel hardening (not covered by other areas)

Supported 433 threads 591 messages Latest

About Lists, Files, Maintainers, Reviewers
Lists
linux-hardening
Files
Documentation/ABI/testing/sysfs-kernel-oops_count, Documentation/ABI/testing/sysfs-kernel-warn_count, arch/*/configs/hardening.config, include/linux/kstack_erase.h, include/linux/overflow.h, include/linux/randomize_kstack.h, include/linux/ucopysize.h, kernel/configs/hardening.config and 8 more
Maintainers
Kees Cook
Reviewers
Gustavo A. R. Silva
Show bot threadsBotsLatest activityActivityNewest threadsNewMost repliesRepliesMost participantsPeople
  1. sysctl: replace overloaded extra pointers with typed bounds and context RFC PATCH 39 patches [email protected] linux-fsdevel lkml llvm +1 net/ (33), kernel/ (29), fs/ (22), drivers/ (14), +8 In review 13 replies
  2. pkeys-based page table hardening RFC PATCH v10 22 patches Kevin Brodsky linux-arm-kernel linux-hardening linux-mm +2 arch/ (18), mm/ (6), include/ (4), security/ In review 9 replies
  3. pkeys-based page table hardening RFC PATCH v9 25 patches Kevin Brodsky linux-arm-kernel linux-hardening linux-mm arch/ (18), mm/ (6), include/ (5), security/ Superseded 46 replies
  4. entry: Consolidate and rework syscall entry handling PATCH 18 patches Thomas Gleixner linux-alpha linux-arch linux-csky +17 arch/ (27), include/ (6), kernel/ (2), Documentation/ Applied 104 replies
  5. Selfpatch-SLR: Randomizing Linux Kernel Structure Layouts at Boot RFC v4 3 patches York Jasper Niebuhr linux-hardening lkml scripts/ (24), kernel/ (11), include/ (9), arch/ (4), +6 New 0 replies
  6. overflow: Match arithmetic in both parts of __builtin_choose_expr PATCH 1 patch Bill Wendling linux-hardening lkml include/linux/overflow.h Superseded 7 replies
  7. kunit/stackinit: Cover declarations bypassed by goto and switch PATCH 1 patch Justin Stitt linux-hardening linux-kselftest lkml +1 lib/tests/stackinit_kunit.c Applied 1 reply
  8. kunit/stackinit: Clean up XFAIL under instrumentation PATCH 1 patch Kees Cook linux-hardening lkml lib/tests/stackinit_kunit.c New 0 replies
  9. arm64: Set kernel stack size from cmdline RFC PATCH 15 patches Mostafa Saleh linux-arm-kernel linux-doc linux-hardening +3 arch/ (7), include/ (3), mm/ (3), kernel/ (2), +1 In review 2 replies
  10. slab: support for compiler-assisted type-based slab cache partitioning PATCH v4 3 patches Marco Elver linux-csky linux-doc linux-hardening +4 mm/ (5), include/ (3), Makefile, init/, +1 In review 18 replies
  11. slab: ZERO_SIZE_PTR alignment and ERR_PTR hardening PATCH v3 5 patches Karl Mehltretter linux-hardening linux-kselftest linux-mm +2 mm/ (2), drivers/, include/, lib/, +1 In review 6 replies
  12. Introduce Overflow Behavior Types PATCH 5 patches Kees Cook linux-doc linux-hardening linux-kbuild +3 include/ (7), scripts/ (6), Documentation/ (4), lib/ (2), +6 In review 45 replies
  13. scripts: kstack_erase: avoid absolute stackleak plugin path PATCH 1 patch Jaihind Yadav linux-hardening linux-kbuild linux-modules +1 scripts/ (2) In review 18 replies
  14. hardening: Default randstruct off with rust for better allmodconfig support PATCH v4 1 patch Mark Brown linux-hardening linux-security-module lkml +1 security/Kconfig.hardening Applied 4 replies
  15. core/entry for v7.3-rc1 GIT PULL Thomas Gleixner lkml arch/ (89), tools/ (37), include/ (33), kernel/ (32), +7 Merged 13 replies
  16. riscv control-flow integrity for usermode PATCH v23 28 patches Deepak Gupta b4-sent linux-arch linux-devicetree +8 arch/ (45), tools/ (7), Documentation/ (5), include/ (4), +1 Applied 34 replies
  17. hardening: Default randstruct off with rust for better allmodconfig support PATCH RESEND v3 1 patch Mark Brown linux-hardening linux-security-module lkml +1 security/Kconfig.hardening Applied 3 replies
  18. overflow: Support sub-union members in struct_size() PATCH 1 patch Bence Csokas linux-hardening lkml include/linux/ (2) In review 2 replies
  19. mm/usercopy: harden bounds checking for vmalloc allocations PATCH 1 patch Dev Jain linux-hardening linux-mm lkml mm/usercopy.c In review 10 replies
  20. sysctl: remove CONFIG_SYSCTL, it just mirrors CONFIG_PROC_SYSCTL RFC PATCH 1 patch Oleg Nesterov lkml net/ (49), kernel/ (31), fs/ (30), include/ (28), +7 Superseded 1 reply
  21. overflow: Add DECLARE_SIZED_FLEX() helper family RFC PATCH 1 patch Jesse Taube linux-hardening lkml include/linux/overflow.h In review 4 replies
  22. hardening: Default randstruct off with rust for better allmodconfig support PATCH v3 1 patch Mark Brown linux-hardening linux-security-module lkml +1 security/Kconfig.hardening Superseded 4 replies
  23. pkeys-based page table hardening RFC PATCH v8 24 patches Kevin Brodsky linux-arm-kernel linux-hardening linux-mm arch/ (15), mm/ (6), include/ (5), security/ Superseded 15 replies
  24. overflow: Convert size_add() to take variadic arguments RFC PATCH 2 patches Andy Shevchenko linux-hardening linux-wireless lkml include/linux/, net/wireless/ In review 14 replies
  25. hardening: Default randstruct off with rust for better allmodconfig support PATCH v2 1 patch Mark Brown linux-hardening linux-security-module lkml +1 security/Kconfig.hardening Superseded 3 replies
  26. hardening: Default randstruct off with rust for better allmodconfig support PATCH 1 patch Mark Brown linux-hardening linux-security-module lkml +1 security/Kconfig.hardening Superseded 2 replies
  27. Bump minimum version of LLVM for building the kernel to 17.0.1 PATCH v2 16 patches Nathan Chancellor linux-arm-kernel linux-doc linux-hardening +5 arch/ (7), Documentation/ (3), scripts/ (2), include/, +2 In review 7 replies
  28. nios2: remove the architecture PATCH 1 patch Ethan Nelson-Moore dmaengine linux-arch linux-csky +10 arch/ (107), Documentation/ (54), drivers/ (9), scripts/ (4), +7 In review 20 replies
  29. (no subject) PATCH Marian Corcodel linux-acpi arch/ (3074), drivers/ (230), sound/ (28), crypto/ (16), +7 1 reply
  30. Bump minimum version of LLVM for building the kernel to 17.0.1 PATCH 14 patches Nathan Chancellor linux-arm-kernel linux-doc linux-hardening +5 arch/ (7), scripts/ (2), Documentation/, init/, +1 Superseded 16 replies
  31. slab: support for compiler-assisted type-based slab cache partitioning PATCH v3 2 patches Marco Elver linux-doc linux-hardening linux-kbuild +3 mm/ (5), include/ (2), Makefile, init/, +1 Superseded 16 replies
  32. pkeys-based page table hardening RFC PATCH v7 24 patches Kevin Brodsky linux-arm-kernel linux-hardening linux-mm arch/ (15), mm/ (6), include/ (5), security/ Superseded 1 reply
  33. pkeys-based page table hardening PATCH v6 30 patches Kevin Brodsky linux-arm-kernel linux-hardening linux-mm +3 arch/ (18), include/ (6), mm/ (5), security/ Superseded 13 replies
  34. FAILED: patch "[PATCH] randomize_kstack: Maintain kstack_offset per task" failed to apply to 5.15-stable tree PATCH 5.15.y 1 patch [email protected] stable include/linux/ (2), init/, kernel/ New 0 replies
  35. overflow: Fix kernel-doc typos in overflows_type and __set_flex_counter PATCH 1 patch Sang-Heon Jeon linux-hardening include/linux/overflow.h New 0 replies
  36. Fix bugs and performance of kstack offset randomisation PATCH v5 2 patches Ryan Roberts linux-arm-kernel linux-hardening linux-riscv +5 arch/ (10), include/ (2), init/, kernel/ Applied 2 replies
  37. slab: support for compiler-assisted type-based slab cache partitioning PATCH v2 1 patch Marco Elver linux-hardening linux-kbuild linux-mm +3 mm/ (5), include/ (2), Makefile, kernel/ Superseded 8 replies
  38. slab: support for compiler-assisted type-based slab cache partitioning PATCH 1 patch Marco Elver linux-hardening linux-kbuild linux-mm +4 mm/ (5), include/ (2), Makefile, kernel/ Superseded 13 replies
  39. Bypass usercopy hardening for kernel-only iterators PATCH v2 2 patches Chuck Lever linux-block linux-fsdevel linux-hardening +1 include/linux/ (2), tools/virtio/linux/ In review 1 reply
  40. iov: Bypass usercopy hardening for kernel iterators RFC PATCH 1 patch Chuck Lever linux-block linux-fsdevel linux-hardening +1 include/linux/ (2) Superseded 6 replies
  41. Fix bugs and performance of kstack offset randomisation PATCH v4 3 patches Ryan Roberts linux-arm-kernel linux-hardening linux-riscv +7 arch/ (7), include/ (3), init/, kernel/, +1 Superseded 23 replies
  42. asdf PATCH v6 5 patches Kees Cook cocci linux-doc linux-hardening +4 include/linux/ (3), Documentation/process/, scripts/, scripts/coccinelle/api/ In review 23 replies
  43. overflow: Make sure size helpers are always inlined PATCH 1 patch Kees Cook linux-hardening lkml include/linux/overflow.h In review 1 reply
  44. bits: De-bloat expansion of GENMASK() PATCH next 14 patches [email protected] linux-arch linux-mm lkml +3 include/ (4), drivers/ (3), arch/, lib/, +1 In review 37 replies
  45. riscv control-flow integrity for usermode PATCH v26 28 patches Deepak Gupta b4-sent linux-arch linux-devicetree +7 arch/ (45), tools/ (7), Documentation/ (5), include/ (4), +1 In review 11 replies
  46. arm64: Unconditionally compile LSE/PAN/EPAN support PATCH 3 patches Marc Zyngier kvmarm linux-arm-kernel arch/ (11) In review 5 replies
  47. Fix bugs and performance of kstack offset randomisation PATCH v3 3 patches Ryan Roberts linux-arm-kernel linux-hardening linux-riscv +5 arch/ (7), include/ (3), init/, kernel/, +1 Superseded 22 replies
  48. overflow: extend shift helpers and add size_shl() PATCH 2 patches Rafael V. Volkmer linux-hardening lkml include/linux/overflow.h In review 1 reply
  49. Faster Arm64 __arch_copy_from_user and __arch_copy_to_user PATCH v2 1 patch Ben Niu linux-arm-kernel lkml arch/arm64/lib/ (3), lib/tests/ In review 2 replies
  50. kbuild: remove gcc's -Wtype-limits PATCH v3 3 patches Vincent Mailhol dri-devel linux-btrfs linux-hardening +5 drivers/gpu/drm/, fs/btrfs/, include/linux/, scripts/ Superseded 13 replies
Page 1 of 9 –