Linux 6.16 Released

Linux v6.16 was released on Sunday, July 27th. I already wrote up a post highlighting the LSM, SELinux, and audit changes that were submitted during the merge window. However, there were additional changes that went into Linux v6.16 that are described below.

SELinux

• Resolve a problem in the SELinux security server code where multiple security IDs were being generated for the same security label during early boot before the SELinux policy is loaded. This should resolve an issue seen by some users of dracut-ng.

• Quiet a UBSAN warning in the SELinux labeled IPsec allocation code. The allocation itself was correct, but a length variable used to track the size of the allocation had an off-by-one bug which caused UBSAN to believe the buffer was too short.

• The SELinux DCCP access controls were removed as the Linux kernel no longer supports DCCP.