The problem is that if you simply say that, something like "2.6.9 is vulnerable", it might not actually be true. Enterprise Linux vendors might actually be runn

The problem is that if you simply say that, something like "2.6.9 is vulnerable", it might not actually be true. Enterprise Linux vendors might actually be running 2.6.9 but with relevant security patches backported.