Skip to content

6.18.18-rc1 review

Greg Kroah-Hartman linux-patches linux-tegra lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest13 patches 8 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/13net/sched: act_gate: snapshot parameters with RCU on replaceinclude/net/tc_act/tc_gate.h net/sched/act_gate.c+214 -880 replies
2/13net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocksinclude/net/act_api.h net/sched/act_ct.c net/sched/cls_api.c+14 -00 replies
3/13apparmor: validate DFA start states are in bounds in unpack_pdbsecurity/apparmor/policy_unpack.c+11 -10 replies
4/13apparmor: fix memory leak in verify_headersecurity/apparmor/policy_unpack.c+0 -10 replies
5/13apparmor: replace recursive profile removal with iterative approachsecurity/apparmor/policy.c+27 -30 replies
6/13apparmor: fix: limit the number of levels of policy namespacessecurity/apparmor/include/policy_ns.h security/apparmor/policy_ns.c+4 -00 replies
7/13apparmor: fix side-effect bug in match_char() macro usagesecurity/apparmor/match.c+20 -100 replies
8/13apparmor: fix missing bounds check on DEFAULT table in verify_dfa()security/apparmor/match.c+3 -20 replies
9/13apparmor: Fix double free of ns_name in aa_replace_profiles()security/apparmor/policy.c+1 -00 replies
10/13apparmor: fix unprivileged local user can do privileged policy managementsecurity/apparmor/apparmorfs.c security/apparmor/include/policy.h security/apparmor/policy.c+43 -90 replies
11/13apparmor: fix differential encoding verificationsecurity/apparmor/include/match.h security/apparmor/match.c+20 -40 replies
12/13apparmor: fix race on rawdata dereferencesecurity/apparmor/apparmorfs.c security/apparmor/include/policy_unpack.h security/apparmor/policy.c +1 more+93 -570 replies
13/13apparmor: fix race between freeing data and fs accessing itsecurity/apparmor/apparmorfs.c security/apparmor/include/label.h security/apparmor/include/lib.h +4 more+153 -1010 replies

Reviews trailers per patch

All 13 patches have a Reviewed-by or Acked-by of their own; the series has one for all of them.

PatchVladimir OlteanJamal Hadi SalimVictor NogueiraSalvatore BonaccorsoGeorgia GarciaCengiz CanMaxime BélairRyan LeeBrett A C SheffieldShuah KhanRon EconomosBarry K. NathanJon HunterMark BrownFlorian FainelliMiguel Ojeda
SeriesT-b T-b T-b T-b T-b R-b T-b T-b
1/13T-b A-b R-b
2/13A-b
3/13T-b R-b R-b
4/13T-b R-b R-b
5/13T-b R-b R-b
6/13R-b R-b
7/13T-b R-b R-b
8/13T-b R-b R-b
9/13T-b R-b R-b
10/13T-b R-b R-b
11/13T-b R-b R-b
12/13T-b R-b R-b R-b
13/13R-b R-b R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 16 reviewers.

Read the v1 thread

Cover letter [PATCH 6.18 00/13] 6.18.18-rc1 review

This is the start of the stable review cycle for the 6.18.18 release. There are 13 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri, 13 Mar 2026 20:03:15 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.18-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.18.18-rc1

John Johansen <[email protected]>
apparmor: fix race between freeing data and fs accessing it

John Johansen <[email protected]>
apparmor: fix race on rawdata dereference

John Johansen <[email protected]>
apparmor: fix differential encoding verification

John Johansen <[email protected]>
apparmor: fix unprivileged local user can do privileged policy management

John Johansen <[email protected]>
apparmor: Fix double free of ns_name in aa_replace_profiles()

Massimiliano Pellizzer <[email protected]>
apparmor: fix missing bounds check on DEFAULT table in verify_dfa()

Massimiliano Pellizzer <[email protected]>
apparmor: fix side-effect bug in match_char() macro usage

John Johansen <[email protected]>
apparmor: fix: limit the number of levels of policy namespaces

Massimiliano Pellizzer <[email protected]>
apparmor: replace recursive profile removal with iterative approach

Massimiliano Pellizzer <[email protected]>
apparmor: fix memory leak in verify_header

Massimiliano Pellizzer <[email protected]>
apparmor: validate DFA start states are in bounds in unpack_pdb

Victor Nogueira <[email protected]>
net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks

Paul Moses <[email protected]>
net/sched: act_gate: snapshot parameters with RCU on replace

-------------

Diffstat:

 Makefile                                  |   4 +-
 include/net/act_api.h                     |   1 +
 include/net/tc_act/tc_gate.h              |  33 +++-
 net/sched/act_ct.c                        |   6 +
 net/sched/act_gate.c                      | 267 +++++++++++++++++++++---------
 net/sched/cls_api.c                       |   7 +
 security/apparmor/apparmorfs.c            | 225 +++++++++++++++----------
 security/apparmor/include/label.h         |  16 +-
 security/apparmor/include/lib.h           |  12 ++
 security/apparmor/include/match.h         |   1 +
 security/apparmor/include/policy.h        |  10 +-
 security/apparmor/include/policy_ns.h     |   2 +
 security/apparmor/include/policy_unpack.h |  83 ++++++----
 security/apparmor/label.c                 |  12 +-
 security/apparmor/match.c                 |  58 +++++--
 security/apparmor/policy.c                |  77 +++++++--
 security/apparmor/policy_ns.c             |   2 +
 security/apparmor/policy_unpack.c         |  65 +++++---
 18 files changed, 604 insertions(+), 277 deletions(-)