Nobody (at least, not me) is calling for the Linux foundation to do additional work.

They've taken it upon themselves to assign a CVE to every bugfix, and it's being pointed out that that doesn't seem to be helping anyone.