[Skunkleton]

In the context of the kernel, it’s hard to say when that’s true. It’s very easy to fix some bug that resulted in a kernel crash without considering that it could possibly be part of some complex exploit chain. Basically any bug could be considered a security bug.

[SSLy]

plainly, crash = DoS = security issue = CVE.

QED.

[michaelt]

BRB, raising a CVE complaining the OOM killer exists.