|
Message-ID: <CAFvHPjvbJiaq6Jt_U9ybSBbwzD1JDVTiq5SeAJscU2NQyfJUdw@mail.gmail.com> Date: Thu, 22 Apr 2021 14:09:19 -0400 From: Francis Booth <influencedchaos@...il.com> To: oss-security@...ts.openwall.com Subject: Re: Malicious commits to Linux kernel as part of university study Mark, >From my understanding from the LKML there were at least 3 patches submitted by Aditya which did manage to make it into the stable trees. https://lore.kernel.org/linux-nfs/CADVatmNgU7t-Co84tSS6VW=3NcPu=17qyVyEEtVMVR_g51Ma6Q@mail.gmail.com/ So I think we can agree that there may be more submissions that have made it through that we aren't yet aware of. On Thu, Apr 22, 2021 at 1:58 PM Mark Steward <marksteward@...il.com> wrote: > On Thu, Apr 22, 2021 at 6:23 PM Ariadne Conill <ariadne@...eferenced.org> > wrote: > ... > > By mining the LKML archive, it may be possible to find the original set > of > > patch submissions by searching for similar keywords as the messages from > > Aditya. If somebody can do that, then we would be able to determine at > > least some of the emails likely to have originated the patches. > > > > This looks like a good guess to me, and if correct, means none of the > submissions in the paper were successful: > > https://lore.kernel.org/linux-nfs/YIEqt8iAPVq8sG+t@sol.localdomain/ > > > Mark >
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.