I read the situation as being worse for Linux (3 CVEs, including one remotely-inducable kernel panic, spanning many versions) than for FreeBSD (1 CVE that can b

I read the situation as being worse for Linux (3 CVEs, including one remotely-inducable kernel panic, spanning many versions) than for FreeBSD (1 CVE that can be exploited to slow down a target system in the latest major version). But even granting that both affected OS flavors have serious DoS issues, a service that used a mix of OS flavors in its servers would be more resistant (not impervious) to attacks based on these TCP problems than a service using only one flavor. So do you really count this as a failure of N-version programming? (Honest question! This is not my area of expertise.)