No the parent is correct- malicious commits made it into stable.
https://lore.kernel.org/lkml/78ac6ee8-8e7c-bd4c-a3a7-5a90c7c...
https://lore.kernel.org/linux-nfs/CADVatmNgU7t-Co84tSS6VW=3N...
https://lore.kernel.org/lkml/78ac6ee8-8e7c-bd4c-a3a7-5a90c7c...
https://lore.kernel.org/linux-nfs/CADVatmNgU7t-Co84tSS6VW=3N...