>distributions could have done _something_ to protect their users prior to publication date.

yeah, distributions could be following the kernel updates more closely and they would have been patched prior to publication. mainline was patched 30 days before publication.

it is not the reporter's responsibility to babysit the linux distributions.