{"as_of":"2026-08-12T03:42:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8f6ad80db5d42a7ec79b91669214a44b1e9d78cc5b6aa2a315891a06a7538fda","coverage":[{"denominator":54,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":54,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T06:58:43.454054Z","state":"measured"},{"denominator":54,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":54,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2601.22196/citation-record","integrity":"/paper/2601.22196/integrity","json":"/paper/2601.22196/citation-record.json","paper":"/paper/2601.22196"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:37.529426Z","title":"2015.Improving the Linux kernel with upstream contributions","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:37.529426Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:c6539f64518d193d8e83b970b7399c5855db3c2597e6d080246af834256f45a4","observation_id":"2bf7eb78-0c70-4449-a112-5e0cf0e48224","resolution":{"observed_at":"2026-08-03T06:58:37.529426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:37.594566Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:37.594566Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:a49ebb3fcdb49ac5a0330da63c49030c0db0929ed2336fed7a080e460048bd54","observation_id":"8b247e7e-111e-4307-9da5-2143f93ed6bd","resolution":{"observed_at":"2026-08-03T06:58:37.594566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:37.748332Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:37.748332Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:8c6d8bb2e5cf2f0f0ae9eea14b0922dd231675d2bdce9f19b98c76ac0863aae6","observation_id":"190f31a7-1983-470b-8690-3e20f845171e","resolution":{"observed_at":"2026-08-03T06:58:37.748332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:38.024672Z","title":"2024.Cyber Resilience Act, Article 14—Reporting obliga- tions of manufacturers","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:38.024672Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:63c1f3b3b7f3d07f7a8d7a0c83a57989a0e405b213969dad457c7d00f5259a61","observation_id":"27ab1a74-2257-4c49-84da-58b1587827a8","resolution":{"observed_at":"2026-08-03T06:58:38.024672Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:38.182100Z","title":"2024.Cyber Resilience Act (CRA)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:38.182100Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:e849405316950454f843d6fc901fc5e7489c463c2008c7b8195cb5971a79f909","observation_id":"01ce5ba1-ce2a-416f-976a-03066ee842a2","resolution":{"observed_at":"2026-08-03T06:58:38.182100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:38.295549Z","title":"2023.Reducing kernel-maintainer burnout","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:38.295549Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:c7fabc6c351492b3625e17cf3a439782b8a0b1a1366fe61b27db55f24aa7b23d","observation_id":"a9706715-7afe-4402-ab82-18ea5912d913","resolution":{"observed_at":"2026-08-03T06:58:38.295549Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:38.410440Z","title":"2024.A turning point for CVE numbers","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:38.410440Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:e182f52924fbc921a8304631e5b18a244f792adb65196330c38d13d1546a31cb","observation_id":"bbea6820-cf2e-4e0c-ad66-7edee2346d07","resolution":{"observed_at":"2026-08-03T06:58:38.410440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:38.515849Z","title":null,"venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:38.515849Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:4e3e6cdf848ca2f71c997ef9333c88f6db7d2df01a051d50452c93c7c4772ef7","observation_id":"6c0637f8-06c3-441c-a602-b7a498cd47fc","resolution":{"observed_at":"2026-08-03T06:58:38.515849Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:38.645182Z","title":"2024.How CrowdStrike Stopped Everything","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:38.645182Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:2be4d06bdc3b63e28b98335f74383058a5864fdf381af9c7bfc5fdef1fdf7e3a","observation_id":"013adbbd-6424-4b23-8cd2-8973e9700b18","resolution":{"observed_at":"2026-08-03T06:58:38.645182Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:38.798481Z","title":"2024.Common Vulnerability Scoring System version 4.0: Specification Document","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:38.798481Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:c09751ffa70a22e167ca23b21edc8434c92cf53ec6d783c6b23343623a5e2ee5","observation_id":"c283e342-139d-4eed-8520-7a5900b02688","resolution":{"observed_at":"2026-08-03T06:58:38.798481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:38.902586Z","title":"Householder, Jeff Chrabaszcz, Trent Novelly, David Warren, and Jonathan M","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:38.902586Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:fec4d12312974039ebe81222d811a8337a1d9173a86053f56da04f8a58299830","observation_id":"ea52e047-86a6-4930-b232-ebcadc00cabf","resolution":{"observed_at":"2026-08-03T06:58:38.902586Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j.jss.2009.09.042","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":"Journal of Systems and Software","work_id":"f4ee74bc-ffaa-4bdc-94f3-ea51190d2b45","year":2010},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:39.048158Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:c985dcd6a4aa8e5356a2531fbc488ebeb7ff1cad6d3a3f1c2bebdbb998aa2737","observation_id":"a56fd2b9-42e6-40f0-bbb9-236d93d5b7e7","resolution":{"observed_at":"2026-08-03T07:04:04.185345Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:39.191087Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:39.191087Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:6a53d7ce77cad2ae678282060aba4897881aad4ce2beb7e78209c977e91ac3f1","observation_id":"6c014443-f066-4868-ab10-d9877eed6940","resolution":{"observed_at":"2026-08-03T06:58:39.191087Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:39.272306Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:39.272306Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:e3ef803f173a8c02042539934a44b4a24168bdbbeaed2e1d7a69f8628d312ed6","observation_id":"6865f2b8-a1ac-405d-9a8a-4c1400e091ff","resolution":{"observed_at":"2026-08-03T06:58:39.272306Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:39.427183Z","title":null,"venue":null,"work_id":null,"year":1958},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:39.427183Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:0aa2555c40152993b8c94f5e16bb1529c40f9b27b3f37641f61c66d93c44c138","observation_id":"317ade1d-58f3-432a-bbe3-61504a271e12","resolution":{"observed_at":"2026-08-03T06:58:39.427183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:39.481892Z","title":"2018.What Stable Kernel Should I Use","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:39.481892Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:44a28705c893af5d8676b6226f22b7384192edd5d5aecee86dbb062f69a659c2","observation_id":"3f0af70d-774e-4d66-8f6b-5117e906f7c8","resolution":{"observed_at":"2026-08-03T06:58:39.481892Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:39.574115Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:39.574115Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:09d657b286c5fd53e5844b0711861c3065ba1dcbdbe76e8a54271262e2a9f575","observation_id":"9fb81fae-03c8-4778-872b-40124744611d","resolution":{"observed_at":"2026-08-03T06:58:39.574115Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:39.670036Z","title":"2023.Demystifying the Linux kernel security pro- cess","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:39.670036Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:1db13a483f6090627da4fe4d7ba7cf7e5e395aaeca789c70917a709bf8bddbb7","observation_id":"35f52730-ca66-4b43-a746-2c33cf8fce41","resolution":{"observed_at":"2026-08-03T06:58:39.670036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:39.800951Z","title":"2024.CVEs are alive, but no not panic!Retrieved October 20, 2025 from https://kernel-recipes.org/en/2024/cves-are-alive-but-no-not-panic/","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:39.800951Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:affe9aa0b327e0e6395254688beb96218036479ec6623b3d1ff62e9401d4e491","observation_id":"9637b018-afe8-471d-b246-82b5adc7b5bf","resolution":{"observed_at":"2026-08-03T06:58:39.800951Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:39.930347Z","title":"2024.Linux is a CNA","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:39.930347Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:b48e96178454a8a80eed25e870ed960a27b90101359512ac57f19b47a4fe0ebb","observation_id":"f84339b3-ef9b-4e78-aec3-acf4c774b462","resolution":{"observed_at":"2026-08-03T06:58:39.930347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:40.084005Z","title":"2024.Linux is now a CNA","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:40.084005Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:aec9bf3c3736131d63a5e35152d3c303d1f9c9176eff41760431f9c81839e94d","observation_id":"012b1bdd-0db6-4893-a85b-9c6fc84162e9","resolution":{"observed_at":"2026-08-03T06:58:40.084005Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:40.223925Z","title":"2024.Linux Kernel CVEs: What Has Caused So Many to Suddenly Show Up?The Linux Foundation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:40.223925Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:22a1d3a84e0294a0083cab34ea27bee42e1aebf6250c69b470383337bb64ab2e","observation_id":"8307259a-0030-41fc-bb98-e679562bb635","resolution":{"observed_at":"2026-08-03T06:58:40.223925Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:40.397593Z","title":"2024.Official CVE definition of vulnerability","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:40.397593Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:4a21422a808466a2fb0a8d0224bdffa6a15ed21b8a2b4e0e5647dd9c3556a5d0","observation_id":"e3b49dce-8d88-44cc-bbbd-f5013f160a6b","resolution":{"observed_at":"2026-08-03T06:58:40.397593Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:40.547998Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:40.547998Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:72f1b36647b8c100cc032194135abed9ea0c29f3a4a117d46403d29d6db5f2ca","observation_id":"30e5088c-c58f-450c-9e9d-a38e53ae0726","resolution":{"observed_at":"2026-08-03T06:58:40.547998Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:40.668252Z","title":"2025.Linux Stable Commit Parse and Query Tool - Sourcehut Git","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:40.668252Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:d087d48b405d13a62e87bb747f40be504ae750e40e7b377bc9aebaa31df52a90","observation_id":"58d88565-4fe2-4187-8e1a-855517a82852","resolution":{"observed_at":"2026-08-03T06:58:40.668252Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:40.802142Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:40.802142Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:044d0a6526e87c4d240e7400922c4053746abe252da074468a14fc5b59035f61","observation_id":"43b8f5ac-a7e5-4132-8297-c1fc7efc7947","resolution":{"observed_at":"2026-08-03T06:58:40.802142Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:40.901138Z","title":"Upstream First","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:40.901138Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:df8ee24fae7c6245989540d8a51890c55d46403a51b72f1a8434471476987017","observation_id":"56a48b4a-c54b-4925-91b0-cd8e11ff55bc","resolution":{"observed_at":"2026-08-03T06:58:40.901138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:40.986703Z","title":"2025.AUTOSEL: Modern AI-powered Linux Kernel Stable Back- port Classifier","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:40.986703Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:50965d479ff10c477221da9b87e7ec862ce1e8c4467f91d37c21871de68c42f9","observation_id":"dbbf4ab9-918a-48fc-a825-d28e05385b01","resolution":{"observed_at":"2026-08-03T06:58:40.986703Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1002/9781118307656","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"2012.Survival Analysis: Models and Applications","venue":null,"work_id":"d4fc0da3-f88c-4df0-ba37-ab8cd02ab875","year":2012},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:41.081835Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:0dbb4a07031312e656cc8c00077901b637ae07d0d84c5af0a496bd43b09b8bc6","observation_id":"2dad5dd6-94d8-4552-ab91-209bac68107a","resolution":{"observed_at":"2026-08-03T07:04:03.851382Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:41.221225Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:41.221225Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:1b17ad011fb13fc29b07fed9b56f4dcfaadc916c3fc6840071df55683ec04c3c","observation_id":"5544787b-f401-46e8-93bf-d6281c0932b3","resolution":{"observed_at":"2026-08-03T06:58:41.221225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:41.381346Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:41.381346Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:7471caa8bc6006a05f29336cc33b580eb3f622f771536ab35600c45515237b13","observation_id":"3f396c1d-e7d8-4f16-b14a-bcb2ba802257","resolution":{"observed_at":"2026-08-03T06:58:41.381346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:41.476155Z","title":"2022.CVEs and the NVD Process","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:41.476155Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:e9b18a8f247b69ae833fea43c0876657e5e31248810d9c0d9039df74c08e739a","observation_id":"9374d6e1-6da7-408e-992d-780226bc9515","resolution":{"observed_at":"2026-08-03T06:58:41.476155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:41.630223Z","title":null,"venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:41.630223Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:2048b6b4143480c9482b07736e239a0d74815f10aa4960ca5edc3a9a5c908fa4","observation_id":"7b9f40c1-ac7c-45f9-a4d3-8f2e75f54340","resolution":{"observed_at":"2026-08-03T06:58:41.630223Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:41.672866Z","title":"2022.Removing the stigma of a CVE","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:41.672866Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:508c4cbe9bd06657ef4786ae7345e1125d8927e2b6dba08d4f0f3eebf810f06a","observation_id":"f005b10c-5793-40ca-8901-40099c2562bc","resolution":{"observed_at":"2026-08-03T06:58:41.672866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:41.772450Z","title":"2024.A script to calculate the number of Linux kernel CVEs published and rejected","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:41.772450Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:75f87dbff2735cfd6955e66a61f725892b5cb979b541e1c8e7b2f1ef24eb33ae","observation_id":"835f75c8-c7c7-45b2-9d3e-91f29d9f2602","resolution":{"observed_at":"2026-08-03T06:58:41.772450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:41.826114Z","title":"2018.FedRAMP Vulnerability Scanning Requirements","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:41.826114Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:3395868f7e1cd067f0647d52961269a958fb64fe266647113c6fdb7430613564","observation_id":"dfee6908-d093-4fd5-ab3c-9be5d4595e70","resolution":{"observed_at":"2026-08-03T06:58:41.826114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:41.985888Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:41.985888Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:97254d3ec82212cb82bd09253ea1055efbc03e7caea9c089ef1bed8fdd2c3a5d","observation_id":"c2639e0a-ff78-478e-b9ea-4d9cefc42ed3","resolution":{"observed_at":"2026-08-03T06:58:41.985888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:42.128830Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:42.128830Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:9217414b41a5b0b311b0037c0087337ace6195e7a7e8a4436a8f097e116527eb","observation_id":"e33ab2d0-0e2f-46d7-baee-4711ffbd1362","resolution":{"observed_at":"2026-08-03T06:58:42.128830Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:42.357104Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:42.357104Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:db2f60400f3e885f937ccd9397a2d7aa4ddb62796da04ddde46e81e9218a458b","observation_id":"e6c91f52-4527-4a98-8d34-54e54c41e36a","resolution":{"observed_at":"2026-08-03T06:58:42.357104Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:42.469395Z","title":"2024.The EU Cyber Resilience Act: Strengthening Digital Security across Europe","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:42.469395Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:b5c7d651954c1c4df39bfe84c2cc54d9882665302ec3986f0f6a7e98be1081e7","observation_id":"7ecd3f08-fa0b-4ba1-a263-3e5d66cab6d8","resolution":{"observed_at":"2026-08-03T06:58:42.469395Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:42.586851Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:42.586851Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:2bfcc1340996baefedf780ca5b858018fe2b7cdfb1e7af9e5e801c71210f9aaa","observation_id":"22fb9855-f8f0-43dc-a49e-1199297ddacf","resolution":{"observed_at":"2026-08-03T06:58:42.586851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:42.675288Z","title":"Duck, Shin Hwei Tan, Julia Lawall, and Abhik Roychoudhury","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:42.675288Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:0db0ec6ca4dfaf9c4bca67d3c0501da04645c32b7677624b72ae9e845f78aada","observation_id":"ee41e358-24da-4ce5-b28f-87b5d73bf9ed","resolution":{"observed_at":"2026-08-03T06:58:42.675288Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:42.753810Z","title":null,"venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:42.753810Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:c478db0a5fef55acb5ac63e6dc3bd30e56244760c6d2163debc71a3e080e28c0","observation_id":"cda68cfb-9de0-4dfd-9dec-07035929f092","resolution":{"observed_at":"2026-08-03T06:58:42.753810Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3359210","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":"Proceedings of the ACM on Human-Computer Interaction","work_id":"296d80d5-273b-4f8f-8314-efbf390146a3","year":2019},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:42.789909Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:698bb09d6656a977498c6642623509542ba44ba61b4413b899d26ed420b22d63","observation_id":"2176251e-2002-4119-badd-148f2c356851","resolution":{"observed_at":"2026-08-03T07:04:03.398494Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:42.850919Z","title":"2025.How the development process works","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:42.850919Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:c61d43f179114ba454be4831b0902f5a72c52fd59be2e02474d4ce641afc0795","observation_id":"bbc3edf2-a7f4-49e4-b8af-3f0ff71ff018","resolution":{"observed_at":"2026-08-03T06:58:42.850919Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:42.947389Z","title":"2012.Re: [Regression w/ patch] Media commit causes user space to misbahave (was: Re: Linux 3.8-rc1)","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:42.947389Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:adcb20befcdc405a643119d94ee43a961963207d76c4190fcd8240989a62298b","observation_id":"f16bf05b-a21a-4759-bab8-bf08785d289c","resolution":{"observed_at":"2026-08-03T06:58:42.947389Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:43.001500Z","title":"2024.A Look at 3 Months of Linux Kernel CVEs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:43.001500Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:3cbae5f196948dfef9c9019006017cca5f8e34eb667012c23c29a87d90cad468","observation_id":"b80138e1-dc62-49e7-b825-ad2b6a3cb084","resolution":{"observed_at":"2026-08-03T06:58:43.001500Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/msr.2017.60","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":null,"work_id":"6184f37d-5203-47f1-872e-9de8e57dab9f","year":2017},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:43.064979Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:1e3c091ed942340d628ebc4a57db51c59bfccd94770c2cb70feb6a50ef376bfd","observation_id":"05d02c6b-cd08-4e90-a713-8ff549512bc8","resolution":{"observed_at":"2026-08-03T07:04:03.248674Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:43.192968Z","title":"2023.Long-term support for Linux kernel to be cut as maintenance remains under strain","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:43.192968Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:9bbeabdf502d00062abb6f6740ad674f58f883a427dd4101be6d6707778543be","observation_id":"aec3c3f4-523d-4f60-a4bd-6fd28792fc80","resolution":{"observed_at":"2026-08-03T06:58:43.192968Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:43.320025Z","title":null,"venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:43.320025Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:8de46e945d461aa45af14772a07a8d121c7519646bb13aca817fd6e3cdfd3c87","observation_id":"21df87ed-9a9c-4260-b3db-d6a849b7037e","resolution":{"observed_at":"2026-08-03T06:58:43.320025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:43.420180Z","title":"2025.Triaging Security Issues Reported by Third Parties","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:43.420180Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:3868bcf26dec9e4413803e2e11f74f148db2b4cd404389a3d12509f7e6c2174c","observation_id":"c8cec03e-56e6-4bbc-aef9-d9b7edf62f51","resolution":{"observed_at":"2026-08-03T06:58:43.420180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T06:58:43.454054Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:43.454054Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:9776a551f6bdca77f36773b5739d60beec0845e943127fe5cb33a7e7c7ef3bd1","observation_id":"a6f2b0ca-2570-4563-9e51-e2829c4bb5da","resolution":{"observed_at":"2026-08-03T06:58:43.454054Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/wcre.2011.31","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"In18th Working Conference on Reverse Engineering, WCRE 2011, Limerick, Ireland, October 17-20, 2011, Martin Pinzger, Denys Poshyvanyk, and Jim Buckley (Eds.)","venue":null,"work_id":"d0ac8d2d-7bb3-4cb4-9cbc-7df0ea91c715","year":2011},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":2011,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:37.886069Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:5872b1c2348946bc7830cc162987cda85e8d80f2336b97d9ed60f0cc8528e82a","observation_id":"46ce2d60-9737-4438-8911-285b2db62670","resolution":{"observed_at":"2026-08-03T07:04:04.524548Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.6084/m9.figshare.31144963.v1","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn’t, and History Fades","venue":"Figshare","work_id":"b59de5a8-6489-4604-ae7b-4a26a26ca651","year":2026},"citing_paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades","version":1},"reference_index":2026,"source":"pdf_text","source_observed_at":"2026-08-03T06:58:42.179383Z"},"links":{"citing_paper":"/paper/2601.22196"},"observation_digest":"sha256:dc0fd22338de4b65a10930ef095166a8b10316e5e1f0bcd7450ba600da11d065","observation_id":"3a67e17c-2a4b-426a-9097-9deca2676bb3","resolution":{"observed_at":"2026-08-03T07:04:03.569263Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2601.22196","last_updated":"2026-01-29T12:45:35Z","latest_version":1,"primary_category":"cs.SE","snapshot_observed_at":"2026-08-09T04:36:37.367578Z","submitted_at":"2026-01-29T12:45:35Z","title":"Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades"},"reference_resolution":{"displayed":54,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":47,"verified_exact":6,"verified_fuzzy":0},"total_outbound_references":54},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 54 of 54 outbound references and 0 inbound Pith citation observations for arXiv:2601.22196."}