
Originally Posted by
rbmorse
You're correct that all code submitted for inclusion in the kernel has to be signed off by both the submitter (no anonymous contributions) and a senior developer who "monitors" the branch to which the code applies.
Once accepted, the code goes into the release-candidate pre-releases where it is both available for anyone's inspection and (allegedly) rigorously tested under real-world conditions (i.e., by thousands of wonks working in basements and garages around the world).
The system is not perfect, as the regression list testifies, but any malicious code would have to be pretty damned obfuscated to get by...and obfuscated code is usually something that gets people's attention.