More than 400 Linux CVEs published in a single day

Sources: linux-cve-announce, HN discussion
Summary: A Hacker News thread on 2026-07-21 highlighted more than 400 Linux kernel CVEs published to the linux-cve-announce list within 24 hours, restarting the recurring debate about the kernel CNA assigning CVE identifiers to large batches of bug fixes. The volume reflects the kernel project's assignment policy rather than a single new mass-exploitation event.
Why it matters: The batch-CVE policy floods vulnerability scanners and downstream triage, and teams that gate on raw CVE counts get little signal from it without severity context.