Just go watch the talks from Linux Security Summit 2018.

https://www.youtube.com/watch?v=KUCwiQZuasA&list=PLbzoR-pLrL...

Linux kernel developers are the first ones to acknowledge that something has to be done to change the course of CVE in the Linux kernel.

Just in 2017, 68% of exploits were caused by out of bounds errors.