For Linux kernel vulnerabilities, there is no heads-up to distributions
(news.ycombinator.com)
1.
2.
CopyFail was not disclosed to distro developers?
(news.ycombinator.com)