Hypothetically let's say that is damage that they can be held liable for. How far does it extend? The patches would have been reviewed and approved by someone

Hypothetically let's say that is damage that they can be held liable for. How far does it extend? The patches would have been reviewed and approved by someone at the linux foundation. Are they complicit and liable? Same goes for the person that merged the code. I don't think that's a door I want to open.