@wolf480pl @ignaloidas @domi @rozenglass There's a bunch of RTOS out there though, and I think we could do with less Linux in devices that are extremely tied to a single-purpose (WiFi APs being a good example of that).
That said for embedded, you should be able to have a small kernel config for your device and so just filter out CVEs for subsystems that aren't used.