Thank you for the interesting response!.<p>The question then given that as you pointed out the kernels that most people run are divergent from upstream for various practical reasons and that getting upgrades out quickly onto systems that are not easy to upgrade very easily is why marking stuff as security is a good idea as it does paint a target on those people who can&#x27;t upgrade straight away.<p>It seems that the Linux team have taken a practical approach to solving the problem by not flagging stuff as security critical and allowing the vendors to handle the packaging.<p>I&#x27;m not saying that the way they do it is perfect but given the unique &#x27;fractured&#x27; way that the kernel ends up all over often in devices and systems that can&#x27;t be upgraded the current approach works.<p>It&#x27;s certainly an interesting question.