In 2024, there were more than 40,000 CVEs published, up almost 40% from 2023.

My prediction is that 2025 will continue the growth.

@bagder once again I learned something new from your post. I missed that the kernel project could automatically assign CVE (CNA = Cve Numbering Authority) and they do for most fixes.
As someone in the trenches just trying to keep systems running unless the CVE allows a bad person access without already having some sort of access, it is just noise. It will get patched as part of routine hopefully monthly patching. Not the best but it's reality.
IaC is slow to adopt to do daily patching.
@bagder nice blue for the linux ones!