Kroah-Hartman: Linux kernel security work
Greg Kroah-Hartman has written anoverview of how the kernel's security team works.
The members of the security team contain a handful of core kerneldevelopers that have experience dealing with security bugs, andrepresent different major subsystems of the kernel. They do thiswork as individuals, and specifically can NOT tell their employer,or anyone else, anything that is discussed on the security aliasbefore it is resolved. This arrangement has allowed the kernelsecurity team to remain independent and continue to operate acrossthe different governments that the members operate in, and it looksto become the normal way project security teams work with theadvent of the European Union's new CRA law coming into effect.