

The following is my guess, I don’t know what the Debian project’s selection criteria for security advisories are.
Taking the first one as an example, CVE-2024-52560 is a bug that affects version 5.15 of the Linux Kernel. The oldest version of Debian that’s still in general LTS is Debian 11 which shipped with Linux 5.10. So they are still supporting releases that may be running the affected kernel and can’t upgrade the kernel for some reason, but would still benefit from some downstream patches that mitigate the exposure of the kernel bug.


Hit install and never stop
I’ll tell you how I distrohop
There’s no flavor I’d say no to
‘cept that faschy one (you know who)
got a hundred boxes runnin’
and a vendor ain’t locked one in
Drop a new one and I’m on it
jumping ships like the bubonic
keeping ancient silicon churning
endless new OS smell burning
I’ll be jumping 'til I drop
to the beat of the endless distrohop