Unrelated: is the HN title editor doing a good enough job to warrant the cost of edits like "Kernel CVE numbers are assigned" (here), which has a completely different meaning than the original "How kernel CVE numbers are assigned"?

You can also listen to Greg KH explain it: Episode 417 – Linux Kernel security with Greg K-H https://opensourcesecurity.io/2024/02/25/episode-417-linux-k...

The mailing list does look like a treasure trove,

https://lore.kernel.org/linux-cve-announce/

Hundreds of disclosures just in the last month alone.

Title should be How kernel CVE numbers are assigned.