The kernel has also been removing a bunch of old unmaintained drivers due to these reports.

I have to wonder how many of these 1000 paths are simply dead drivers with security vulnerabilities [1]. Impossible to exploit because nobody uses it, but easy enough to juice up the numbers of "found" vulnerabilities.

[1] https://lwn.net/Articles/1068928/