Ubuntu recently classified a 9.8 CVSS rated vulnerability as "low priority". The first question would seemingly be, how could something so clearly identified as critical be reclassified to nothing?
Well, that's an easy answer. Because that's the whole point of CVSS.
But what
