> If you look at the Linux kernel CVEs, they've been steadily increasing over time [...] I don't think those data points support your argument. The number of C

> If you look at the Linux kernel CVEs, they've been steadily increasing over time [...] I don't think those data points support your argument. The number of CVEs don't support any argument really. More CVEs are assigned, yes. That doesn't mean more security issues. In the olden days of 8 years ago, a buffer overflow would be patched with no fanfare and no CVE assigned. Nowadays, often only theoretically exploitable issues will still be given a CVE.