linux-kernel - Re: [GIT PULL] hardening fixes for v6.16-rc1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAHk-=wj4a_CvL6-=8gobwScstu-gJpX4XbX__hvcE=e9zaQ_9A@mail.gmail.com>
Date: Sat, 31 May 2025 11:20:20 -0700
From: Linus Torvalds <torvalds@...ux-foundation.org>
To: Kees Cook <kees@...nel.org>, Konstantin Ryabitsev <konstantin@...uxfoundation.org>
Cc: linux-kernel@...r.kernel.org, Eric Biggers <ebiggers@...nel.org>, 
	Ingo Saitz <ingo@...nover.ccc.de>, kernel test robot <oliver.sang@...el.com>, 
	Marco Elver <elver@...gle.com>, Nathan Chancellor <nathan@...nel.org>, 
	Thiago Jung Bauermann <thiago.bauermann@...aro.org>
Subject: Re: [GIT PULL] hardening fixes for v6.16-rc1

On Sat, 31 May 2025 at 08:00, Kees Cook <kees@...nel.org> wrote:
>
> Please pull this small handful of hardening fixes for v6.16-rc1.

WTF, Kees?

You seem to have actively maliciously modified your tree completely.

There are completely crazy commits in there that are entirely fake.

You have this: f8b59a0f90a2 Merge tag 'driver-core-6.16-rc1' of
git://git.kernel.org/pub/scm/linux/kernel/git/driver-core/driver-core

which *claims* to be from me, and committed by me, but is very much
not. It's some garbage you have entirely made up.

Yes, there is a real commit like that, but it's has the SHA1 ID of
9d230d500b0e.

And this isn't some kind of innocent rebasing mistake, because this
actively lies about who committed it.

This is completely unacceptable.

I will now refuse to pull *anything* from you until you explain what
the f&*^ you have been up to, because this looks like you have been
doing actively bad things.

You need to nuke that tree, and come up with a good explanation for
this kind of shit.

I'm cc'ing Konstantin, because I really think these kinds of games are
COMPLETELY UNACCEPTABLE, and this is not the kind of behavior we can
have on kernel.org accounts.

Konstantin - please disable Kees' account immediately until this is
cleared up. Because this looks *malicious*.

                 Linus