Back

@sj @spmatich I don’t know if this *the* link, but it’s a link from synopsys a security product vendor. The post specifically links kernel CVE changes to NVD changes. So it seems at least some vendors have the position that the two events, Linux kernel having its own CNA team, and NVD stopped tagging CVSS, are correlated somehow

https://community.synopsys.com/s/question/0D5Uh000007i8czKAA/black-duck-nvd-and-linux-kernel-cve-process