
I pivoted to Kernel back in like April because of the user space flags not paying out. But it's so hard to find a genuine issue that is not a dupe these days. I do have one that should pay out soon, not a dupe and not discovered internally: CVE-2026-112532. They accepted the flag for it as well. Reported that one on June 29th and still waiting. It was just fixed.
