当然有一部分原因是 Linux 可以给自己发 CVE 编号了，然后因为内核太重要了，所以宁可多发不肯错过

参见：https://cdn.kernel.org/doc/html/latest/process/cve.html

> As part of the normal stable release process, kernel changes that are potentially security issues are identified by the developers responsible for CVE number assignments and have CVE numbers automatically assigned to them.