I want to see the same graph but for number of CVEs introduced. ie, when we find a CVE, find out which kernel version introduced it. This would only be useful for kernel versions that were a few years old, so we'd have had time to find most of the CVEs. But it'd still be interesting.
There's a graph for bugs and bug-fixes (not CVEs, but in linux close) near the end of this article that looks approximately like what you are interested in: https://lwn.net/Articles/1088776/