If you read the specific vulnerabilities that were released you'd see an embargo was in place. According to Xen.org, Linode is on the predisclosure list. Seems they got the information, fixed the issue, and were able to announce it once the Xen guys did.