Sent out an RFC doc on assessing security impact of Linux patches: https://lore.kernel.org/all/20240311150054.2945210-2-vegard.nossum@oracle.com/
Rendered page: https://vegard.github.io/linux/2024-03-11/security-assessment.html
Bingo card:
☐ security theater
☐ circus
☐ meaningless
☐ idiotic
...what did I miss?