Stealthily Introducing Vulnerabilities in Open-Source Software via Hypocrite Commits

A research about introducing vulnerabilities into the kernel while pretending to fix bugs. The researchers succeeded.

This research was done last year, but subsequent (seemingly unrelated) work by the same authors is now causing a lot of drama in the Linux kernel community.

Paper: https://github.com/QiushiWu/QiushiWu.github.io/blob/main/papers/OpenSourceInsecurity.pdf
Drama: https://twitter.com/gregkh/status/1384785747874656257