@kees @vathpela @gregkh I don't want to get too pedantic here, but that corollary there looks like a prime example of the fallacy of affirming the consequent.
I really disagree, not all bugs are security bugs. They could be vulnerabilities at some point in the future (i.e. latent), but we have no evidence to say that they are today.
Don't get me wrong, I think these patches are good and should be applied everywhere, but they arguably do not fix vulnerabilities.