Any kernel bug gets a CVE even if it's not really a vulnerability or can be exploited