Kroah-Hartman: Linux CVEs, more than you ever wanted to know

Greg Kroah-Hartman is writing
a series of blog posts about Linux becoming a Certificate
Numbering Authority (CNA):

It's been almost 2 full years since Linux became a CNA (Certificate
Numbering Authority) which meant that we (i.e. the kernel.org
community) are now responsible for issuing all CVEs for the Linux
kernel. During this time, we've become one of the largest creators of
CVEs by quantity, going from nothing to number 3 in 2024 to number 1
in 2025. Naturally, this has caused some questions about how we are
both doing all of this work, and how people can keep track of it.

So far, Kroah-Hartman has published the introductory post, as well
as a detailed
post about kernel version numbers that is well worth reading.