There's a graph for bugs and bug-fixes (not CVEs, but in linux close) near the end of this article that looks approximately like what you are interested in: https://lwn.net/Articles/1088776/