Supabase is in the Linux kernel

Many of these are months old, why are they being announced as if they were scanned and exposed? I mean Microsoft, 2026 Sept Patch Tuesday: 964 CVEs...