> ## Content Index
> Fetch the complete content index at: https://itsfoss.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Malicious Pull Requests? Not on Linus Torvalds' Watch
- URL: https://itsfoss.com/news/linus-kernel-broken-pull-request/
- Published: 2025-06-03T03:52:58.000Z
- Updated: 2025-06-03T03:52:58.000Z
- Description: A new Linux kernel drama? Yes, but it's been handled.
- Author: Sourav Rudra
- Tags: Linux, News, #Import 2025-11-08 21:15

By now, you already know that [Linux kernel](https://itsfoss.com/linux-kernel-6-15/) development is a massive undertaking that's carried out by thousands of contributors, and more often than not, [tensions rise](https://itsfoss.com/rust-kernel-policy-linux/), leading to some mean things being said.

I like to think of such happenings as just part of the process when dealing with a huge and complex project like Linux.

A recent event serves as a reminder of just how intense things can be.

## Guardian of the Linux Kernel is Awakened

**Linus to patches that mess with the Linux kernel.*

Expressing [concern](https://lore.kernel.org/all/CAHk-=wj4a%5FCvL6-=8gobwScstu-gJpX4XbX%5F%5FhvcE=e9zaQ%5F9A@mail.gmail.com/?ref=itsfoss.com) over a kernel contributor’s tree (*a set of patches*), Linus Torvalds reprimanded [Kees Cook](https://github.com/kees?ref=itsfoss.com) for submitting **330 pull requests** that copied Torvalds’ own patches and re-listed him as the author.

He called the move "***actively malicious***", pointing to fake merge commits that included incorrect [SHA-1](https://en.wikipedia.org/wiki/SHA-1?ref=itsfoss.com) signatures. For instance, a [legitimate patch](https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d230d500b0e5f7be863e2bf2386be5f80dd18aa&ref=itsfoss.com) by Torvalds had a SHA1 beginning with `9d230d500b0e`, while the [duplicate/fake version](https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git/commit/?h=hardening-v6.16-rc1-fix1&id=f8b59a0f90a2adfce5a9206ce5589ed0dc19543c&ref=itsfoss.com) submitted by Kees used `f8b59a0f90a2`.

![](https://itsfoss.com/content/images/2025/06/original-linus-pull-request.jpg)

![](https://itsfoss.com/content/images/2025/06/fake-linus-pull-request.jpg)

**Linus' original pull request on the left, the fake one on the right.*

Soon after, **Kees clarified what might have gone wrong**, attributing the issue to a faulty SSD that had thrown errors during data transfer, resulting in corrupt trees and broken merges. He apologized and agreed to get rid of the affected tree and [committed to rebuilding the patch set cleanly](https://lore.kernel.org/all/156567EE-E5BB-43C4-B5A6-439D83FF387D@kernel.org/?ref=itsfoss.com) before resubmitting.

Still, Linus [remained skeptical](https://lore.kernel.org/all/CAHk-=wjktqa94u%5F=++YX7XxUr57iLAs1GqtHPOY-o-N0z7wyeA@mail.gmail.com/?ref=itsfoss.com) of Kees’ explanation, doubting that such a massive rewrite of commits could have happened unintentionally. He noted that, under normal circumstances, [Git](https://git-scm.com/?ref=itsfoss.com) would correctly update the committer information during merge rebasing, suggesting that some form of scripting (*read automation*) was likely involved.

Kees, again, clarified that [he didn't do it deliberately](https://lore.kernel.org/all/202505312229.DE917E6D@keescook/?ref=itsfoss.com#t), mentioning that a combination of a failing SSD, a tricky manual rebase, and some overridden checks caused this. 

After some back and forth in between Kees, Linus and [Konstantin Ryabitsev](https://www.linkedin.com/in/mricon/?ref=itsfoss.com), it was clear that the root cause was an unintended rewrite of committer information by the [B4](https://b4.docs.kernel.org/en/latest/?ref=itsfoss.com) tool, which erroneously altered commit metadata during history rewriting.

Thanks to the 'mostly civil' and very constructive communication among all the parties involved, the issue was dealt with, and in all this, one thing was made clear: **Linus Torvalds is the vigilant guardian of the Linus kernel**, someone who, while easily angered, is always watching.

You can check out the [whole thread](https://lore.kernel.org/all/20250601-wandering-graceful-crane-ffc0b7@lemur/t.atom?ref=itsfoss.com) if you want to dig into the details.

**Suggested Read** 📖

[After Recent Kernel Drama, Rust for Linux Policy Put in PlaceThe recent Linux kernel drama over Rust code has resulted in the creation of a Rust kernel policy.![](https://itsfoss.com/content/images/icon/android-chrome-192x192-116.png)It's FOSS NewsSourav Rudra![](https://itsfoss.com/content/images/thumbnail/rust-kernel-policy-linux-2.png)](https://itsfoss.com/rust-kernel-policy-linux/)