@gregkh Quick question about CVE assignments, are you only assigning based on commits that actually make an appearance in stable? What happens if you have a mainline fix that fails to apply to stable (AKA the previous mainline release) and nobody submits a backport, would that escape CVE review and assignment..?