@wolf480pl @domi @rozenglass Well effectively the CVEs in kernel either mean: Use an LTS, or get a team for managing a fork (where then the CVEs can be useful to not miss an important backport).

And given the massive size of the Linux kernel, it makes full sense.
Same problem as like forking chromium (in full or grabbing bits).