On 17/02/2024 13:55, Greg Kroah-Hartman wrote:
+A list of all assigned CVEs for the Linux kernel can be found in the +archives of the linux-cve mailing list, as seen on +https://lore.kernel.org/linux-cve-announce/. To get notice of the +assigned CVEs, please `subscribe +<https://subspace.kernel.org/subscribing.html>`_ to that mailing list.
Is the list open to discussion as well? (e.g. impact, analysis, etc.) Or is this meant to be purely as a log of assignments? What sort of content is (not) welcome? Should this be mentioned in the doc? Vegard