different cultures have different views on disclosing vulnerabilities to distros before the public?

Yes :) The blackhatter would obviously sit on it until they can sell it or use it, the whitehatter collaborate the kernel and distros to patch, and the greyhatter argues on HN whether the latest *fail was responsible enough or not.

Yes? "Different cultures" doesn't just mean different countries; there are many cultures within infosec.